2241e7f0ad859029504c840c057d99775741d0bd19c8c9c7147d802bd94b3698

Analysis

max time kernel
154s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-12-2022 01:23

Target

4756-135-0x0000000000400000-0x0000000000408000-memory.exe
Size

32KB
MD5

d8915bfaf00562010dbc686c41e12c13
SHA1

7475b220902fc2350945b025becdd9926956d0fb
SHA256

2241e7f0ad859029504c840c057d99775741d0bd19c8c9c7147d802bd94b3698
SHA512

d1e854e15be50f92135ef1af19e4f4a6583b48de6d4463456cd61356c0e5bc20f7a5b6fb780e0cee73967987f8d6daced02e3dc048af4599b0d5813b78e329e8
SSDEEP

384:qRCd+Oq9VxfkU4FL9oDPlMNcLlb5sVKjye5Ct:qRCd+Oq9VOHclMNEjo

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3068 524 WerFault.exe 4756-135-0x0000000000400000-0x0000000000408000-memory.exe

pid	pid_target	process	target process
3068	524	WerFault.exe	4756-135-0x0000000000400000-0x0000000000408000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4756-135-0x0000000000400000-0x0000000000408000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4756-135-0x0000000000400000-0x0000000000408000-memory.exe"
1⤵
PID:524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 524 -s 232
2⤵
- Program crash
PID:3068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 524 -ip 524
1⤵
PID:2240