fc42321905ea799088246ac846db33d4de5f0c4a17cb052f73cd20b33c0edc9f

Analysis

max time kernel
101s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2022 13:47

Target

1544-68-0x0000000000410000-0x0000000000924000-memory.exe
Size

5.1MB
MD5

a85778482fe5e7fb266f9c7388a2b422
SHA1

14ce0a14e9c4ccbace77cb8e7e0973d91a597c02
SHA256

fc42321905ea799088246ac846db33d4de5f0c4a17cb052f73cd20b33c0edc9f
SHA512

1ed384b339769688e7c17657c63ab40d90a4fd7af111f9343876b642f49eb62be9e404c6ea2cf8b7be82e48b17cce468a0f6ec7cf8ced5e1e2269f0ec5996120
SSDEEP

6144:d34sxRXfpYvW/aMJdSGLltVrPmDskzVqqD0Ffo:isvXfpuWiMvFruDsvqEg

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3832 4532 WerFault.exe 1544-68-0x0000000000410000-0x0000000000924000-memory.exe

pid	pid_target	process	target process
3832	4532	WerFault.exe	1544-68-0x0000000000410000-0x0000000000924000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1544-68-0x0000000000410000-0x0000000000924000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1544-68-0x0000000000410000-0x0000000000924000-memory.exe"
1⤵
PID:4532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 216
2⤵
- Program crash
PID:3832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4532 -ip 4532
1⤵
PID:5016