bfaf0657aa820e8b5fa5be1c7c6eb436308ead8c12693c3351e1632e5dcb81e1

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25/10/2022, 13:42

Target

3096-238-0x0000000000580000-0x0000000000638000-memory.exe
Size

736KB
MD5

4e4dc219151762da39ab5ed800da3791
SHA1

8d82c7f6eb6fd6e58e58ab206b9a0d780d4ac061
SHA256

bfaf0657aa820e8b5fa5be1c7c6eb436308ead8c12693c3351e1632e5dcb81e1
SHA512

86b47d7c27e0d8c17af894f8b09c95b906c0d85963c040b6f3cf1dff090f67b048e7a011863885c36f03ac42bc04e82f64e367c08e8dda7ea9a89c60f7d0e8b5
SSDEEP

12288:p+4XzW2Uj5ExcrdZh+UIUQWaEiTZAHjEGJ0+5RiYUXD6PSu6cKwETjYGMTJ5SKbg:M4XzlUj5ExcJuEiFADEGJx5K67EYGWZ0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4676	1984	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\3096-238-0x0000000000580000-0x0000000000638000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3096-238-0x0000000000580000-0x0000000000638000-memory.exe"
1⤵
PID:1984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1984 -s 144
  2⤵
  - Program crash
  PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1984 -ip 1984
1⤵
PID:4364