42ed7cf2142cecc0c4254e9343d3fc807a0c1cdcfd5f0d8f75de6f6ce1cf6038

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2022 03:55

Target

1568-175-0x0000000000400000-0x00000000005A9000-memory.exe
Size

1.7MB
MD5

4b7431209419d241a305447bd51c4c58
SHA1

4ac942fb301f9730ae5ead9ccc80bc1886229559
SHA256

42ed7cf2142cecc0c4254e9343d3fc807a0c1cdcfd5f0d8f75de6f6ce1cf6038
SHA512

280c45265796cd432d4328d4000778a29eb24acf861377f2ec00f298b1c702c72b6057a2b6172d01146b2fca0e2a1a9cf347aeb54056ef259cd6d88898be4401
SSDEEP

6144:unf2sFRhQCdhcUoSSwu5To9EPD2W7/4lZl7p0zhsU8QRIuM:uhFJcUoSSwu5To9EKW7/4lZlNEhRRl

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

384 2492 WerFault.exe 1568-175-0x0000000000400000-0x00000000005A9000-memory.exe

pid	pid_target	process	target process
384	2492	WerFault.exe	1568-175-0x0000000000400000-0x00000000005A9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1568-175-0x0000000000400000-0x00000000005A9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1568-175-0x0000000000400000-0x00000000005A9000-memory.exe"
1⤵
PID:2492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2492 -s 148
2⤵
- Program crash
PID:384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2492 -ip 2492
1⤵
PID:3628