61189cf88a8391fb1c32f44e445a9e0e78830a31f6021244312eaaa456151d13

Analysis

max time kernel
90s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2022 17:59

Target

1496-66-0x0000000000400000-0x0000000000469000-memory.exe
Size

420KB
MD5

8ed38162b7ad9b1bd19b3f330bd9bee2
SHA1

998042f99a382f9cbc7bd95b1c8c9878f6fa1710
SHA256

61189cf88a8391fb1c32f44e445a9e0e78830a31f6021244312eaaa456151d13
SHA512

76e0ff1a304b9ae4b3ca8da794de9e9cb1d979471ed48648f6c52fb234fddc227c9d011c823a895c4ae0ecef2b44508769e35d07fa51fe1a8ec2d34b80cead50
SSDEEP

6144:t7RuOykrfGN/brhpEaYgy68YCjGi9jtwJgxpcxqeHivYaB0qi:DuOykrONDrEk3x89jttSxqeHiga

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2384 4724 WerFault.exe 1496-66-0x0000000000400000-0x0000000000469000-memory.exe

pid	pid_target	process	target process
2384	4724	WerFault.exe	1496-66-0x0000000000400000-0x0000000000469000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1496-66-0x0000000000400000-0x0000000000469000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1496-66-0x0000000000400000-0x0000000000469000-memory.exe"
1⤵
PID:4724

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4724 -s 216
2⤵
- Program crash
PID:2384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4724 -ip 4724
1⤵
PID:2224