012adc98c593d9027980fe45705fefc5b1649c7c658173aa86b3324a54861ca4

Analysis

max time kernel
90s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09-10-2022 05:18

Target

608-64-0x0000000000400000-0x0000000000414000-memory.exe
Size

80KB
MD5

e7b5648dfbbeee521615013fcbf7b882
SHA1

1c603b082a078fab9d9ce0dccc867b0612ef042a
SHA256

012adc98c593d9027980fe45705fefc5b1649c7c658173aa86b3324a54861ca4
SHA512

80c795464da1f30922a64447a3158454141c63bbedea02c0747f9fe96d784165dfbe8d50e097f50ab8a69fb7292178af420c56e650bce8d58bcb267079eba122
SSDEEP

768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6R:AdMzAzjavO9uG+NNdQ4MGQR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4824 3248 WerFault.exe 608-64-0x0000000000400000-0x0000000000414000-memory.exe

pid	pid_target	process	target process
4824	3248	WerFault.exe	608-64-0x0000000000400000-0x0000000000414000-memory.exe

C:\Users\Admin\AppData\Local\Temp\608-64-0x0000000000400000-0x0000000000414000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\608-64-0x0000000000400000-0x0000000000414000-memory.exe"
1⤵
PID:3248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3248 -s 220
2⤵
- Program crash
PID:4824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3248 -ip 3248
1⤵
PID:2960