882caa90ae0905dfc5ecdbce594107b7ae596e5e40069fc0fa68cd4f49c03961

Analysis

max time kernel
65s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-02-2023 20:12

Target

1800-209-0x00000000008A0000-0x000000000099B000-memory.exe
Size

1004KB
MD5

814f287e2004e4622594c71ce20251cc
SHA1

70abe7bf95624fc5bc76a20f0c36556cfc677e6e
SHA256

882caa90ae0905dfc5ecdbce594107b7ae596e5e40069fc0fa68cd4f49c03961
SHA512

745a8b9a8b1ab83c7ca6b642f2cc18f6e9ce4d2ad2d53c82a16720f5f46abbd445d8759c471fc81e667bf2fdbffb1ab5b4a1140583fbcc99d016a457510606d2
SSDEEP

12288:fLnFyY+BkrW53DW7oEKY8AZF1+THsPXF3L2LY5ZKhbQvpM2gv1aXlA/Z0BaxL2oz:fx3++wTW7oEKY840H3bf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5072	3708	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1800-209-0x00000000008A0000-0x000000000099B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1800-209-0x00000000008A0000-0x000000000099B000-memory.exe"
1⤵
PID:3708
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 240
  2⤵
  - Program crash
  PID:5072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3708 -ip 3708
1⤵
PID:2240