da526deb3fbd854817eb0ba23ba1b5a25f20462b26b0c5f64a27d2279362bf72

Analysis

max time kernel
90s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/11/2022, 11:33

Target
1780-69-0x0000000000400000-0x000000000043C000-memory.exe
Size 240KB
Sample221101-nn3ewabea4
SHA256 da526deb3fbd854817eb0ba23ba1b5a25f20462b26b0c5f64a27d2279362bf72
MD5 556147cf22d7d5ce6f8e44d68b983ddb
SHA1 ff687d4e97c969385f49fc3ca60e63484dfcd24b
SHA512 7d9e6f12a3d7e6f711270b43a1db340ef49049f194f0cbb4b71f6e939a7c87a2bfc2715cadc3f7a6512425a574a1b1c9fb129764061375c11d680baba7b8a8c6
SSDEEP 3072:5ea5jJwA+e7vBZBUNwkrAkk6tVxUsQXHyX6r0X7N1DFYSbhaXcXNBLb6r7/UxR:5j5Se7GUEpUjXC1LXDFYS9ycXn+rjUx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4776	4720	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1780-69-0x0000000000400000-0x000000000043C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1780-69-0x0000000000400000-0x000000000043C000-memory.exe"
1⤵
PID:4720
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4720 -s 224
  2⤵
  - Program crash
  PID:4776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4720 -ip 4720
1⤵
PID:4128