ea62dfb2c76d8fc5456065ded42eac87625128b50c38968c3df2e9e9867dea5f

Analysis

max time kernel
140s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
07-10-2023 10:30

Target

1456-3-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

49ca5d57bad516cfc227ac9178099e2b
SHA1

b57cff93cde033b8b0cbde78bb80fce909b733e5
SHA256

ea62dfb2c76d8fc5456065ded42eac87625128b50c38968c3df2e9e9867dea5f
SHA512

7cbf1823fe56520e67f33a78086d713b34d75882c6ecf90ae9e1b9607e88c76cd4c4b93037c2c45e949032ca36afad0b1c43af4e14bf6cbec18b7f43fac4ff24
SSDEEP

3072:DrPI5jSu1aq2gfA4DqmtkY2j0eUnkrfPqU6xyhACMOTM+jAY:Du1aq2GJOmtMSnkrXq7qAgQ+

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

404 4132 WerFault.exe 1456-3-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
404	4132	WerFault.exe	1456-3-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1456-3-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1456-3-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:4132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4132 -s 228
2⤵
- Program crash
PID:404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4132 -ip 4132
1⤵
PID:1520