011a810067b221fbc44d50cb6467ea7be1c32dd97937b828f7a2bc78683b6d0e

Analysis

max time kernel
90s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
31/10/2022, 14:47

Target

1964-66-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

6fd74184cf65d0aa436550a7398a8391
SHA1

f8ee86988f44c0684fd11c1bc168fe84986b144b
SHA256

011a810067b221fbc44d50cb6467ea7be1c32dd97937b828f7a2bc78683b6d0e
SHA512

7202b465977f1586d9bc66d04411dc0bc3c14baa0b4b7d51853e0e4a05b2f0b7c75fcd55c0b7c0e83854759b6e04dd8ea50d6da5eb060d3cdd254038ab7b338c
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqBIzmd:nSHIG6mQwGmfOQd8YhY0/EQUG

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4960	4084	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1964-66-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1964-66-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4084
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4084 -s 216
  2⤵
  - Program crash
  PID:4960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4084 -ip 4084
1⤵
PID:1988