1b370f8172138e01c2883a8b7d4ede22c9bf3165e315e495cecdd53d9f52a067

Analysis

max time kernel
64s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
17-10-2022 15:50

Target

1096-58-0x0000000000400000-0x0000000000459000-memory.exe
Size

356KB
MD5

14c2fc24448e5d79808fe15c0fb3168e
SHA1

01f2433ff183822f6788065602e61b9567a80dc0
SHA256

1b370f8172138e01c2883a8b7d4ede22c9bf3165e315e495cecdd53d9f52a067
SHA512

03913d87fd63b9ffe9abeaa6eaaff82ed699f55d944b281268e6b91974a9238d1aa267666e0e7fb367059a1bca7351178d53144dedf8334670be3482ed2e2e95
SSDEEP

6144:Yzx7ZApszolIo7lf/igRoDlVi0UJSEpX0978lMHXxh+Y0nfx:ex7Rkx7lCqoR4hSVjHX/+5n

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1260 460 WerFault.exe 1096-58-0x0000000000400000-0x0000000000459000-memory.exe

pid	pid_target	process	target process
1260	460	WerFault.exe	1096-58-0x0000000000400000-0x0000000000459000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1096-58-0x0000000000400000-0x0000000000459000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1096-58-0x0000000000400000-0x0000000000459000-memory.exe"
1⤵
PID:460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 460 -s 216
2⤵
- Program crash
PID:1260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 460 -ip 460
1⤵
PID:4964