73061bbd4fc803df2cc61a7c1e2a6cca718e772a9442ab0cf854cd18df762771

Analysis

max time kernel
159s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09-12-2022 05:22

Target

4932-139-0x0000000000400000-0x000000000042F000-memory.exe
Size

188KB
MD5

b98e54c5082638cd75e8a583a33f5d4f
SHA1

75e73b5e6f71527e317e4c5509550446747dbdf2
SHA256

73061bbd4fc803df2cc61a7c1e2a6cca718e772a9442ab0cf854cd18df762771
SHA512

b063b3d7370a0db500f38d956439add917f7cc8a67f51c49b639c8900c9a8c954140ddeea07f96f5d06ffcf96dc09031b3c84ccdf6a1efc20bec0991779ea7bc
SSDEEP

3072:Iaf56jYo/wrnBGdNWLGmS35FDhRNvD5XVlmmMMbo30KjM6rQOZlNjW/8nu:kYZkdWG7Zh/b5llm3Mbo307W1bjfnu

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3316 1816 WerFault.exe 4932-139-0x0000000000400000-0x000000000042F000-memory.exe

pid	pid_target	process	target process
3316	1816	WerFault.exe	4932-139-0x0000000000400000-0x000000000042F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4932-139-0x0000000000400000-0x000000000042F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4932-139-0x0000000000400000-0x000000000042F000-memory.exe"
1⤵
PID:1816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1816 -s 228
2⤵
- Program crash
PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1816 -ip 1816
1⤵
PID:2652