402a6dbb771498108618d821a370897c6911db9f36cfe2a654b2a3dd4239147e

Analysis

max time kernel
138s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
07-10-2023 12:12

Target

1268-3-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

2afd22e310c7b5e3c347cf0ec9cfbc46
SHA1

e4acbd702b0d162a64fc6e2fa4b1f2a413efe3a2
SHA256

402a6dbb771498108618d821a370897c6911db9f36cfe2a654b2a3dd4239147e
SHA512

e67060338f6881a4fa7b216438fb87c260ed002356a044152ec642d04df8706892bb53665f44cff80d1fe814c83bd3f76a9fe9d8c1c0a72f65e9bad4e0dd78ae
SSDEEP

3072:DrPI5jSu1kq2gfA4DqmtkY2j0eUnkrfPqU6xyhACMOTM0jAY:Du1kq2GJOmtMSnkrXq7qAgQ0

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1028 3000 WerFault.exe 1268-3-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
1028	3000	WerFault.exe	1268-3-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1268-3-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1268-3-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:3000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3000 -s 216
2⤵
- Program crash
PID:1028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3000 -ip 3000
1⤵
PID:4016