5c746c7b149808b9df33ce930ee2626ee712ec14cfdc869559afec3c3a36ab22

Analysis

max time kernel
190s
max time network
219s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
07/12/2022, 18:52

Target
1528-111-0x0000000000400000-0x00000000008CB000-memory.exe
Size 4.8MB
Sample221207-xjhpcaff68
SHA256 5c746c7b149808b9df33ce930ee2626ee712ec14cfdc869559afec3c3a36ab22
MD5 ef7cc5da6263dba39341f9adc11e9f20
SHA1 d5686a291a71b635865dbbf3dfae10de14f8c68b
SHA512 c216b3ae8544191455651ec12b798fc4a2129477b1ccb5ff0d03264e4ed2080b3015748c66cb56b14dd0d53cf17b99ead0efa0c76890514ae79844a2b8880df2
SSDEEP 49152:C/7FssO0KaUVzp+Z9vAaE5FKY/t764UzLUA/AOiyjrbsnnzvSn9rsPN/+9XjN5n/:y5s3tV+Zp4UzJ/TknzZWXXOY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
220	4888	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\1528-111-0x0000000000400000-0x00000000008CB000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1528-111-0x0000000000400000-0x00000000008CB000-memory.exe"
1⤵
PID:4888
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4888 -s 216
  2⤵
  - Program crash
  PID:220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4888 -ip 4888
1⤵
PID:2168