e974787b71a29b678b73c62181de40a47d673bb6b62d337b7dffdd625b460907

Analysis

max time kernel
203s
max time network
216s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2022 08:54

Target

1328-59-0x0000000000080000-0x0000000000085000-memory.exe
Size

20KB
MD5

a6920bdb4f78709ecdca296c3330bcd6
SHA1

0ccfadbc81572e7d053faa11b04af4907d29f913
SHA256

e974787b71a29b678b73c62181de40a47d673bb6b62d337b7dffdd625b460907
SHA512

4cd8ac0d9ca7b547aab227349d5d190038c57e1759ab62365e90accee2713125a6790d803bbbaf169e9560041d02f3f10b0adec5aec2577983b5767ae53bccb5
SSDEEP

96:3m2unjKp7Y5DkYoCYNiESNfWNsn8WEmO8qQuD1oCbyRTq8QUtFS32hW:3Kup7iDkYDxNeNejEmO8q7xlbuTXf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3720	2648	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\1328-59-0x0000000000080000-0x0000000000085000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1328-59-0x0000000000080000-0x0000000000085000-memory.exe"
1⤵
PID:2648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2648 -s 216
  2⤵
  - Program crash
  PID:3720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2648 -ip 2648
1⤵
PID:3940