bd4b79550ef1645db77ba23f07ecf3d981a0114e4062a4bd591b2cbc99745f1e

Analysis

max time kernel
290s
max time network
306s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
10-12-2022 09:16

Target

3332-153-0x0000000000400000-0x0000000000407000-memory.exe
Size

28KB
MD5

7d89ade8221c3183592b554b62e973c2
SHA1

eaee5a37e9e8e54fb3c1d01c3ca211b3c84e1c4e
SHA256

bd4b79550ef1645db77ba23f07ecf3d981a0114e4062a4bd591b2cbc99745f1e
SHA512

d864e28a2f995f1a621710b7b513179402f275bea843016d90160a68e934cba12dc8699b44a00ee44a1645fea6cb4793a4c90fd8a69cd41bc6a136c3d2c4202f
SSDEEP

192:ucDfLAThZ1e7sf4QTbPk5+cput6tmyvmgN9AbytrrnPuy:hDkThZ0o4kbc5F0kfN9AirnWy

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

804 3492 WerFault.exe 3332-153-0x0000000000400000-0x0000000000407000-memory.exe

pid	pid_target	process	target process
804	3492	WerFault.exe	3332-153-0x0000000000400000-0x0000000000407000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3332-153-0x0000000000400000-0x0000000000407000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3332-153-0x0000000000400000-0x0000000000407000-memory.exe"
1⤵
PID:3492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3492 -s 216
2⤵
- Program crash
PID:804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3492 -ip 3492
1⤵
PID:2788