cec894c28fa7b5c29c1862b024fa0a0968afc5b9ef2405f971a6f78f3047f97c

Analysis

max time kernel
126s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-02-2023 05:39

Target

1136-60-0x0000000000400000-0x000000000045A000-memory.exe
Size

360KB
MD5

0f6da40d28984d70d9261c963d278137
SHA1

a1a3cbec6a36f60b3f09ce99222dc08970ead775
SHA256

cec894c28fa7b5c29c1862b024fa0a0968afc5b9ef2405f971a6f78f3047f97c
SHA512

acf4baa416b6e2dff0cee809b766bb86bca7325de6bf7323f7d9b9d9773c0901d38511e9f5a7614014048e008a6e59015278942bedee7c03e3625f9f7ce66bf9
SSDEEP

6144:unMyPLVGsc6HO6iab7pX8YNGOOICa2xk2qmhjcRRWggQsYCzt:2MoVGX3abz2xk2qmhjcRRWggQsYCzt

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

608 2088 WerFault.exe 1136-60-0x0000000000400000-0x000000000045A000-memory.exe

pid	pid_target	process	target process
608	2088	WerFault.exe	1136-60-0x0000000000400000-0x000000000045A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1136-60-0x0000000000400000-0x000000000045A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1136-60-0x0000000000400000-0x000000000045A000-memory.exe"
1⤵
PID:2088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2088 -s 224
2⤵
- Program crash
PID:608

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2088 -ip 2088
1⤵
PID:952