498688dd29d3cd9f6271ea9068f7cd76a83ac92f990929cd17d22c1c6a8a55f3

Analysis

max time kernel
68s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09-10-2022 04:44

Target

288-191-0x0000000000400000-0x0000000000513000-memory.exe
Size

1.1MB
MD5

a99454cedd4dd2cecbd5d9b56e0e2924
SHA1

8fe97a26ffefead834c2c16834cdc01ee6b0694b
SHA256

498688dd29d3cd9f6271ea9068f7cd76a83ac92f990929cd17d22c1c6a8a55f3
SHA512

5e699743b5f98ae30e06f4ea30778a7be35cad4d75d628e01b16ed26de13cc504d2304ec326d1fc96fa018315f4b401dcb2cfb64ec096e57a89b21e9f5cd187a
SSDEEP

12288:CPy+9p2HD970QYzfemkdBSUjmtiV+h2CtY//7cHHlSu2XvRFj24xh9FaoLRm/JzY:CPZiD9UemkeFau2gY//An4j5Flu5B

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3488 3532 WerFault.exe 288-191-0x0000000000400000-0x0000000000513000-memory.exe

pid	pid_target	process	target process
3488	3532	WerFault.exe	288-191-0x0000000000400000-0x0000000000513000-memory.exe

C:\Users\Admin\AppData\Local\Temp\288-191-0x0000000000400000-0x0000000000513000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\288-191-0x0000000000400000-0x0000000000513000-memory.exe"
1⤵
PID:3532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3532 -s 216
2⤵
- Program crash
PID:3488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3532 -ip 3532
1⤵
PID:4496