cc497237c7ae284f1cc7cdff63191b0ac9a33d2094ea2cbf7efaabbd3727cd0b

Analysis

max time kernel
112s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
10-10-2022 12:41

Target

1156-67-0x0000000000400000-0x0000000000433000-memory.exe
Size

204KB
MD5

9258f38e12d332dfc1eadd3b0b468d85
SHA1

12018708b2ded2384a647ad38c0a3dea1fae8933
SHA256

cc497237c7ae284f1cc7cdff63191b0ac9a33d2094ea2cbf7efaabbd3727cd0b
SHA512

d4a99edbace9330619a87af09ea724ab9d96cae50a9169ac6d6deae08aec617b044642b79ffec82ea34cae9bd79f7d7a4e2b0a5e4f7ba88a507bbf15daa97765
SSDEEP

3072:S3bwUUCZjY/UURTbaiceGUlzFr0qOnZEcsx8VLJoeYMSMqqD:S3kUjJY/fRT+iceGUlzFruZdJNzxqqD

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3276 4028 WerFault.exe 1156-67-0x0000000000400000-0x0000000000433000-memory.exe

pid	pid_target	process	target process
3276	4028	WerFault.exe	1156-67-0x0000000000400000-0x0000000000433000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1156-67-0x0000000000400000-0x0000000000433000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1156-67-0x0000000000400000-0x0000000000433000-memory.exe"
1⤵
PID:4028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4028 -s 216
2⤵
- Program crash
PID:3276

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4028 -ip 4028
1⤵
PID:1124