61ee8f84e57c8c382421712cea60a6988b8ae8af6b68cf9cc890ffe5401696da

Analysis

max time kernel
140s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2023 13:55

Target

2956-57-0x0000000000400000-0x0000000000473000-memory.exe
Size

460KB
MD5

5794cb11355606fc84f72b0683a69414
SHA1

87afb8dbd9a31ca1ca404b67c192369b588a6638
SHA256

61ee8f84e57c8c382421712cea60a6988b8ae8af6b68cf9cc890ffe5401696da
SHA512

8ff3d9b810ab9c3d54f1510e2f162b5dd4c988b74d0d707711bf70857c590cdf79637f78c7baa5e5a023b088424ea78797441619a3d32e3dad5ab80bf8587a04
SSDEEP

3072:YypKuY4Ykrcd/ewCokL7h3lbrRvzB865Aac:YKKn4YEcdpCokfvhvzWa

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3544 2748 WerFault.exe 2956-57-0x0000000000400000-0x0000000000473000-memory.exe

pid	pid_target	process	target process
3544	2748	WerFault.exe	2956-57-0x0000000000400000-0x0000000000473000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2956-57-0x0000000000400000-0x0000000000473000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2956-57-0x0000000000400000-0x0000000000473000-memory.exe"
1⤵
PID:2748
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2748 -s 216
  2⤵
  - Program crash
  PID:3544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2748 -ip 2748
1⤵
PID:1308