e5ccf468cfa1e385089706da558b54648959f396e7d657d7e578e14023a2603c

Analysis

max time kernel
95s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-12-2022 15:07

Target

1608-66-0x0000000000400000-0x000000000042F000-memory.exe
Size

188KB
MD5

f7d8f20d9623d7ccf3f4bef4e8b8dff9
SHA1

6592ca08a6cce14947f5360f3a7a01497c9d442a
SHA256

e5ccf468cfa1e385089706da558b54648959f396e7d657d7e578e14023a2603c
SHA512

2158c5907bedc378c9cf6a6dfafc34bac6a4c1e2bc1d6e270ffd3ae33e36928ab966ffc592df5385dfa719fb33c118e8b401f2e686c6ddab034d5f1e3f314a9d
SSDEEP

3072:Zfxt8MPsI6OAc1fQhuHikQNgWIn7EWU/IsQcHOzULBfkqBP/jrvaDsJVwuz6:Zfr5UtcWbkQNeVmIPucyBfkgP/HSsJiu

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2892 1064 WerFault.exe 1608-66-0x0000000000400000-0x000000000042F000-memory.exe

pid	pid_target	process	target process
2892	1064	WerFault.exe	1608-66-0x0000000000400000-0x000000000042F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1608-66-0x0000000000400000-0x000000000042F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1608-66-0x0000000000400000-0x000000000042F000-memory.exe"
1⤵
PID:1064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1064 -s 220
  2⤵
  - Program crash
  PID:2892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1064 -ip 1064
1⤵
PID:3472