6629faae41d672612e950503a685c9a4221874b33713899ffa4ad9ba87298d36

Analysis

max time kernel
138s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/11/2022, 17:30

Target

1296-78-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

256ec871aeaf723faa235acba3c7ce0a
SHA1

d9db01317569508c86c98ffdba4c22e5393d3479
SHA256

6629faae41d672612e950503a685c9a4221874b33713899ffa4ad9ba87298d36
SHA512

89158f476451b0104bc206848b650742e1f6ac283a95ad28d1c903bd83952281789e6438fadd808e19d748fc354ff5d2f21bfb392b8751bdc8e44e356c13de16
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqIIzmd:nSHIG6mQwGmfOQd8YhY0/ExUG

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1352	2652	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1296-78-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1296-78-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:2652
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2652 -s 216
  2⤵
  - Program crash
  PID:1352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2652 -ip 2652
1⤵
PID:3532