9558b0d4ddbaef21edb6c35fa1c9f867d92b48220fdb8aa3b73823a007e7868b

Analysis

max time kernel
62s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-10-2022 02:09

Target

1916-142-0x0000000000400000-0x00000000008E3000-memory.exe
Size

4.9MB
MD5

e7f6f744fb04922709b7409b6920c94e
SHA1

28237763d57d8150479dea20c945e12e2818e59a
SHA256

9558b0d4ddbaef21edb6c35fa1c9f867d92b48220fdb8aa3b73823a007e7868b
SHA512

69648d66ddb4ecdcc6a6a9ffde08988d63cafa07a6af302afd38fef48c3169db7178905d268faa1ec43753d7820c6db9bc5cba6447449614c6c25629ee527b37
SSDEEP

24576:M+6cZEdC7zw+P4vGYAb4Qqcgva6cfxoHds:X/Kd4P4vecygy/2HS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4824 2732 WerFault.exe 1916-142-0x0000000000400000-0x00000000008E3000-memory.exe

pid	pid_target	process	target process
4824	2732	WerFault.exe	1916-142-0x0000000000400000-0x00000000008E3000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1916-142-0x0000000000400000-0x00000000008E3000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1916-142-0x0000000000400000-0x00000000008E3000-memory.exe"
1⤵
PID:2732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2732 -s 216
2⤵
- Program crash
PID:4824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2732 -ip 2732
1⤵
PID:2996