e4b635bc553560b87cf96eca0d6471844c53351caf157424a2542af436ffea57

Analysis

max time kernel
62s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 05:17

Target

1576-61-0x0000000000400000-0x00000000027F7000-memory.exe
Size

36.0MB
MD5

6f240d6bb13a1ae964b078a1d4a24c01
SHA1

7c60fac46e89820cf6d30bdda6c3555c877e3d80
SHA256

e4b635bc553560b87cf96eca0d6471844c53351caf157424a2542af436ffea57
SHA512

e1c803f6798441649b3173c7cf423ada2efbd63643210768539cf0d5acf5bad92457ba383fdf030f53d6b3abd0de1fa61e08cb892f4bff8ffd55e117de6fc1f2
SSDEEP

6144:c5dzwO5jJFSIijqVSS8LfZujp8DqmRq7uYz:cZkqx8Nujp+qmGu

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2276 2148 WerFault.exe 1576-61-0x0000000000400000-0x00000000027F7000-memory.exe

pid	pid_target	process	target process
2276	2148	WerFault.exe	1576-61-0x0000000000400000-0x00000000027F7000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1576-61-0x0000000000400000-0x00000000027F7000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1576-61-0x0000000000400000-0x00000000027F7000-memory.exe"
1⤵
PID:2148
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 216
  2⤵
  - Program crash
  PID:2276

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2148 -ip 2148
1⤵
PID:3640