98ac11aac0012b44ef79adc483d75ec7d54f5de3f56f186ec9cecd8d0aa757b5

Analysis

max time kernel
188s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2022 15:03

Target

1048-57-0x0000000001290000-0x00000000012D0000-memory.exe
Size

256KB
MD5

2f2f858279fed95e3c38ef59bbbd83b4
SHA1

0cd55f26f630ad0ec243a8df948c39b4a17b8667
SHA256

98ac11aac0012b44ef79adc483d75ec7d54f5de3f56f186ec9cecd8d0aa757b5
SHA512

37fe6e7f50c6ca48bac19de062aad0e144cab7e2e232d444fd196ce753267adcdf6d84c9998596a318ed25de24e188e91393bdf2b2c673da52cc6f8aec1decee
SSDEEP

6144:Rz+Zpcirbu6fG9V1YMZMBL+WBLdIDppJhub6xyPz+:Rz+ZpcYGMOpJkbt+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4384	4860	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1048-57-0x0000000001290000-0x00000000012D0000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1048-57-0x0000000001290000-0x00000000012D0000-memory.exe"
1⤵
PID:4860
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4860 -s 84
  2⤵
  - Program crash
  PID:4384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4860 -ip 4860
1⤵
PID:4904