61c6e3b789bdc14fecc701c7318159b496b556e133e52ea7b963392b5a1e788c

Analysis

max time kernel
89s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2023 18:11

Target

896-143-0x0000000000400000-0x0000000000420000-memory.exe
Size

128KB
MD5

a593866d20c3b70a75bfd9ba8ce6f1fe
SHA1

26a176ecf9d1f042688f9134464bc0075c4f0bcb
SHA256

61c6e3b789bdc14fecc701c7318159b496b556e133e52ea7b963392b5a1e788c
SHA512

d04c0be73ba495d410fbf8b607c8375e38458ccae9bb53d6b1a95b3b99959389a47a2fe5ccb8ae0f4e54dd3eac1592357c551769cfd7af13cddbafc224e950d1
SSDEEP

3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgiqq:faO1tme++wiF

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

856 1884 WerFault.exe 896-143-0x0000000000400000-0x0000000000420000-memory.exe

pid	pid_target	process	target process
856	1884	WerFault.exe	896-143-0x0000000000400000-0x0000000000420000-memory.exe

C:\Users\Admin\AppData\Local\Temp\896-143-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\896-143-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:1884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 216
2⤵
- Program crash
PID:856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1884 -ip 1884
1⤵
PID:2144