b379302c2fe515696f3699d316bdff66c257ae79d3539abb41e9abbc7cda56cb

Analysis

max time kernel
278s
max time network
333s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10-12-2022 01:41

Target

4352-139-0x0000000000400000-0x000000000044C000-memory.exe
Size

304KB
MD5

fb95dd987e87f7f2966cd1c961defa4b
SHA1

db75f1e498591a809ddbd347e8540fa3734b5942
SHA256

b379302c2fe515696f3699d316bdff66c257ae79d3539abb41e9abbc7cda56cb
SHA512

03271d71254c9ea36a9c5776bb5451c85cb2a02b2423694e3787676c4914cf4d332769301f54f735482c5947a5ff23d68ec007af034b31ef4676513de07a98a5
SSDEEP

6144:UCteODDozKirj1Z1xE++F1EyuU+3FUxFke2B22WbFkp:Ue3A/j1ZT+7EyMiFke22

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4908 4072 WerFault.exe 4352-139-0x0000000000400000-0x000000000044C000-memory.exe

pid	pid_target	process	target process
4908	4072	WerFault.exe	4352-139-0x0000000000400000-0x000000000044C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4352-139-0x0000000000400000-0x000000000044C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4352-139-0x0000000000400000-0x000000000044C000-memory.exe"
1⤵
PID:4072
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4072 -s 88
  2⤵
  - Program crash
  PID:4908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4072 -ip 4072
1⤵
PID:3788