6330bb1c23f7ddc81eae914628bf624cb84401da140c096970298f998dc32e75

Analysis

max time kernel
153s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 19:45

Target

2324-235-0x0000000000400000-0x00000000004C8000-memory.exe
Size

800KB
MD5

6e69e14228c6aecfa3f9b597c4688ca9
SHA1

7bf2686a0624f03405dc7753223c115c15ee6681
SHA256

6330bb1c23f7ddc81eae914628bf624cb84401da140c096970298f998dc32e75
SHA512

646b3822e4c436d4265259fbc5d5836386d98b83214c0f8a8ae1a9aa6ac3152823dc74819b9e0965b90cde236c0080084ba1dfa441f88ebaf70dafaf48e4483c
SSDEEP

12288:KZkqx8Nujp+qn6uyNXbCBkoekOWUsIOiizzMRK34+NBR:KZkPjq6uq4tbYlizz0K3x

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4428 1448 WerFault.exe 2324-235-0x0000000000400000-0x00000000004C8000-memory.exe

pid	pid_target	process	target process
4428	1448	WerFault.exe	2324-235-0x0000000000400000-0x00000000004C8000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2324-235-0x0000000000400000-0x00000000004C8000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2324-235-0x0000000000400000-0x00000000004C8000-memory.exe"
1⤵
PID:1448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1448 -s 228
2⤵
- Program crash
PID:4428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 1448 -ip 1448
1⤵
PID:4488