6ad5345c2eae5a4ce7efc856698c66d1d15762b62466dc3bb2dded92dbb58b80

Analysis

max time kernel
60s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14/04/2023, 15:03

Target

1968-81-0x0000000000400000-0x0000000000480000-memory.exe
Size

512KB
MD5

a5e87e7e21d98bd9d1c16cce2527f94f
SHA1

3e022fe9bae6f3c40cedfcef1cc1eb213019cacf
SHA256

6ad5345c2eae5a4ce7efc856698c66d1d15762b62466dc3bb2dded92dbb58b80
SHA512

903126f9a974ad7118d8dc544368d3a5a332db24b405b0b0c277c3094e931e44f53d41b8385fa25134147ffde8af8187d142962bf943d10e84d03e6419bbf4e3
SSDEEP

12288:W406AQY5PupeoDrQ+3JJmYZHQJs/ZPMtRq:66A15PupeoDrQeZHQoZI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1256	1280	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\1968-81-0x0000000000400000-0x0000000000480000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1968-81-0x0000000000400000-0x0000000000480000-memory.exe"
1⤵
PID:1280
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1280 -s 124
  2⤵
  - Program crash
  PID:1256

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1280 -ip 1280
1⤵
PID:4240