9e6ac553943b1cb7cf91cfd583be24e1acf1db0728002c20b0e0a84d9d8053fa

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-09-2022 18:07

Target

101900-177-0x0000000000750000-0x0000000000778000-memory.exe
Size

160KB
MD5

3f7ec963f1ec3553cceb59cac5d8d63b
SHA1

627e076f885f53bb1d6c921c4139de0b1f77d48d
SHA256

9e6ac553943b1cb7cf91cfd583be24e1acf1db0728002c20b0e0a84d9d8053fa
SHA512

51a8590c2afb092f95924e6107d7dbb160be1b75e193601ad3c71495e5c991740ca4e6583d3eca24cb1b997a25256b09401702ed9996f07dd4c2f5401c547eaf
SSDEEP

3072:0YO/ZMTF9BEowLke9eOsX15VbDFnWRPthXSSjx:0YMZMB9BEo7AedXFkpth

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2100 4968 WerFault.exe 101900-177-0x0000000000750000-0x0000000000778000-memory.exe

pid	pid_target	process	target process
2100	4968	WerFault.exe	101900-177-0x0000000000750000-0x0000000000778000-memory.exe

C:\Users\Admin\AppData\Local\Temp\101900-177-0x0000000000750000-0x0000000000778000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\101900-177-0x0000000000750000-0x0000000000778000-memory.exe"
1⤵
PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4968 -s 224
2⤵
- Program crash
PID:2100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4968 -ip 4968
1⤵
PID:4884