16c8ecc61e976f7c89469bae92bcf005a672f0c9c2c14f9848e1a81819c34f9e

Analysis

max time kernel
112s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 23:38

Target

4788-138-0x0000000000E90000-0x0000000000ED0000-memory.exe
Size

256KB
MD5

b4a558064295c188bfee77f52f2cf8bb
SHA1

922f676e53c91116d48427989bddb80d2c2ee8f9
SHA256

16c8ecc61e976f7c89469bae92bcf005a672f0c9c2c14f9848e1a81819c34f9e
SHA512

84c37a78cbba706e700e1d9734b46704e0ad71dfd7e657f302938dff69ca0c1edcba68b99c4c7417792f7c57fc3b45a9163660af601c93c67af1be719b45bf95
SSDEEP

6144:+7ncV7DU9926ftYMZMBgcf0T9shXIAVqhfbf01:+7ncV7qYGMj/Vq1b81

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3448	1628	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\4788-138-0x0000000000E90000-0x0000000000ED0000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4788-138-0x0000000000E90000-0x0000000000ED0000-memory.exe"
1⤵
PID:1628
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 192
  2⤵
  - Program crash
  PID:3448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1628 -ip 1628
1⤵
PID:3068