18aaf8c5f5b65df75d9abf519938e42230ffcbd31ceeffd527f47a5204771c39

Analysis

max time kernel
6s
max time network
2s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-09-2022 01:32

Target

304-259-0x0000000000400000-0x000000000094A000-memory.exe
Size

5.3MB
MD5

e8fffcaea950d6836f744ab98e0102f6
SHA1

b6501a8ee02b7976623b22d275c18dd3b551eec3
SHA256

18aaf8c5f5b65df75d9abf519938e42230ffcbd31ceeffd527f47a5204771c39
SHA512

f1a158a21271b097a66fd2cc9f2a403b965366f50c95cd2140cc3ab176147ac1179ac50e91476229102f6326721fcea0ba96be8968b48c46764a57895eae4efd
SSDEEP

24576:lP/k69a/bcq76tndALvBDXrBV9IOzRVL:2Ea/bcq7EOLZLrBN9VL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2416 1512 WerFault.exe 304-259-0x0000000000400000-0x000000000094A000-memory.exe

pid	pid_target	process	target process
2416	1512	WerFault.exe	304-259-0x0000000000400000-0x000000000094A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\304-259-0x0000000000400000-0x000000000094A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\304-259-0x0000000000400000-0x000000000094A000-memory.exe"
1⤵
PID:1512

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1512 -s 216
2⤵
- Program crash
PID:2416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1512 -ip 1512
1⤵
PID:2380