e39ec11b22543202abac81e5070f24de08b244b40090c218c0d6775eeb829570

Analysis

max time kernel
144s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-11-2022 19:40

Target

70316-269-0x0000000000540000-0x0000000000580000-memory.exe
Size

256KB
MD5

af56ac122d834f69c8e6f5d98a8745cc
SHA1

97b32bc773fae0e82efb86f171a8e38fdcae75a9
SHA256

e39ec11b22543202abac81e5070f24de08b244b40090c218c0d6775eeb829570
SHA512

35718ed345caf1c4c630cede235c04eb82779a2eee861dd277eb1642f59b768f130c1d0037155f359a42b63335aad2d2894f67dcfdc765f95e740b7a21cc350f
SSDEEP

6144:ZaZYswY38e4bD6f2YMZMBgcf0T9shXIAVqhfb2C1:ZaZYswY3+YGMj/Vq1b71

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4880	4876	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\70316-269-0x0000000000540000-0x0000000000580000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\70316-269-0x0000000000540000-0x0000000000580000-memory.exe"
1⤵
PID:4876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 140
  2⤵
  - Program crash
  PID:4880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4876 -ip 4876
1⤵
PID:4856