ae527507b7beb45b1d5bbf19ebbbebbd78d594ea1fc71b0db1e1f86cff4658c2

Analysis

max time kernel
91s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-11-2022 10:45

Target

1708-184-0x0000000000400000-0x0000000000A00000-memory.exe
Size

6.0MB
MD5

3bc8a2a5d6abdd857eb4ffba7560ed5a
SHA1

770e9e2be2ac3fccfe4fa2dfdbb37b2c27033d22
SHA256

ae527507b7beb45b1d5bbf19ebbbebbd78d594ea1fc71b0db1e1f86cff4658c2
SHA512

3e000914e98c5e0fe9e8bde46eb49892895c56c3ae1121ea04c0f2dd9517017ed08a6edeb934c383d2d8ff505e2725ce4a921b17e566991ecf859e7e69e2363a
SSDEEP

24576:+P3z69a/Tcq76tndAOvBDXrBVC5qIBVi:YEa/Tcq7EOOZLrBTeV

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4796 4900 WerFault.exe 1708-184-0x0000000000400000-0x0000000000A00000-memory.exe

pid	pid_target	process	target process
4796	4900	WerFault.exe	1708-184-0x0000000000400000-0x0000000000A00000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1708-184-0x0000000000400000-0x0000000000A00000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1708-184-0x0000000000400000-0x0000000000A00000-memory.exe"
1⤵
PID:4900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 216
2⤵
- Program crash
PID:4796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4900 -ip 4900
1⤵
PID:4812