32c02f30d1e1f1acb3da5e1d9e7962ac7ac81a9c27cce0c54929b969d5d14177

Analysis

max time kernel
89s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 05:29

Target

4208-144-0x0000000000400000-0x0000000000469000-memory.exe
Size

420KB
MD5

141442dfeadd0bdcfaea3c4bd14a3729
SHA1

bc4649f30027ce9ace23ca97252b50b20972d1a1
SHA256

32c02f30d1e1f1acb3da5e1d9e7962ac7ac81a9c27cce0c54929b969d5d14177
SHA512

cf2915c75f39536831f894bd6b3aaff46bbeef3c4fd5362684b6792e86d4e81c812d9c5345ecde5a4338e44bb0aca3b34a9e8c8c4a34e1944f4fbf2a6371a618
SSDEEP

6144:c5dzwO5jJFSIijqVSS8LfZujp8DqzRA6ut:cZkqx8Nujp+qzdut

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
384	880	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\4208-144-0x0000000000400000-0x0000000000469000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4208-144-0x0000000000400000-0x0000000000469000-memory.exe"
1⤵
PID:880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 880 -s 224
  2⤵
  - Program crash
  PID:384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 880 -ip 880
1⤵
PID:2224