186a81aa1b004f3851c529f3f64e229a940d0544d13f7ef88017b2913fa47218

Analysis

max time kernel
97s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
18-10-2022 07:21

Target

4228-139-0x0000000000400000-0x0000000000420000-memory.exe
Size

128KB
MD5

407b24cea1694a4e4ee1a4607e839fa0
SHA1

fdcc3fc756df518a0108db2035a5ae81256aba13
SHA256

186a81aa1b004f3851c529f3f64e229a940d0544d13f7ef88017b2913fa47218
SHA512

3daee621ba91513520d433b23cd48595d1e091ab7665e346fc21dab23221b50ad8b0133e457d4bd5ad24d8eccd6cbfbb458155aa9095ae1e936da57cafa006de
SSDEEP

3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgiUq:faO1tme++wib

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4656 5036 WerFault.exe 4228-139-0x0000000000400000-0x0000000000420000-memory.exe

pid	pid_target	process	target process
4656	5036	WerFault.exe	4228-139-0x0000000000400000-0x0000000000420000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4228-139-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4228-139-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:5036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5036 -s 216
2⤵
- Program crash
PID:4656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5036 -ip 5036
1⤵
PID:1220