a6be8e3ed71a70ef92fcfcc472c7d53a7f9c36610e2dff5714a7add16aaa2813

Analysis

max time kernel
137s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
22/10/2022, 06:32

Target
1196-93-0x0000000000400000-0x0000000000458000-memory.exe
Size 352KB
Sample221022-hatmxsbdan
SHA256 a6be8e3ed71a70ef92fcfcc472c7d53a7f9c36610e2dff5714a7add16aaa2813
MD5 4ccb415944035e5ddf0304dd2483eac5
SHA1 5996512169156d9efb331429a5fa993acef210e6
SHA512 edfc9582b9f0f5fb9f3989b09756055b21afa82028a3909cc05d9ee3cd7dc260cd45111027917c6affe71ef9747d221e78065831ec118faa9093b9c8bd4c978c
SSDEEP 6144:MSkBoTqkuRAW0jhkjplgxCY7zzcpUlFb:VGA6a/2jpuxCUzwq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4184	4092	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\1196-93-0x0000000000400000-0x0000000000458000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1196-93-0x0000000000400000-0x0000000000458000-memory.exe"
1⤵
PID:4092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4092 -s 220
  2⤵
  - Program crash
  PID:4184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4092 -ip 4092
1⤵
PID:1216