6ef119233eeafcaaa21ef70d82a2b093d55353c6b0c3ed0efb0ee191e0bdf6a9

Analysis

max time kernel
76s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
26-09-2022 09:12

Target

1212-68-0x0000000000280000-0x0000000000902000-memory.exe
Size

6.5MB
MD5

1dd74eb8ad4854defa84b8fdec02e572
SHA1

453b5cb000bf4379f727989445e1b5efda476b03
SHA256

6ef119233eeafcaaa21ef70d82a2b093d55353c6b0c3ed0efb0ee191e0bdf6a9
SHA512

96394bb0f26bd5f8d2b2cd2935b8d0392a423bed25c2cde5aabf191a446f2d14a8f30014309ac45345a89463dd480c7f349baa15e67cefd9acde70a216455805
SSDEEP

3072:7OLPUPSuVr3lo7c+nNX7Ub6p/SfGvljMrv4M8HCvRcuNL3JYMDMqqDvFf:7O7U6uVbZKIGvljMr78inJzwqqDvFf

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

624 1628 WerFault.exe 1212-68-0x0000000000280000-0x0000000000902000-memory.exe

pid	pid_target	process	target process
624	1628	WerFault.exe	1212-68-0x0000000000280000-0x0000000000902000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1212-68-0x0000000000280000-0x0000000000902000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1212-68-0x0000000000280000-0x0000000000902000-memory.exe"
1⤵
PID:1628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 192
2⤵
- Program crash
PID:624

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1628 -ip 1628
1⤵
PID:3220