ce74055a03c4f995c25e831a7c74e30adaf61607e5361357167f520a97a9e6de

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 15:58

Target

1932-2-0x0000000000400000-0x0000000000486000-memory.exe
Size

536KB
MD5

e26af6cca9dc833bf82f8d7f11dc2932
SHA1

b26ba0b306524fc00f867edd2b09aa9aad745659
SHA256

ce74055a03c4f995c25e831a7c74e30adaf61607e5361357167f520a97a9e6de
SHA512

17c56d00ab317cc528a6ead9625c4ae2a903077545c810c41d981d1400115adfa40198ce805e1c31f8793c798998ea79dee1810fd96d6e218384755d9ccc7ea0
SSDEEP

3072:TrPI5jSu1UgDgfA4D3j+6XrgGHT4SW4NsnGC4EN/kMBsupYX9c5omTSTtyl:zu1UgDGJrj+6JHT4+WlkgQLmTSTk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4108 748 WerFault.exe 1932-2-0x0000000000400000-0x0000000000486000-memory.exe

pid	pid_target	process	target process
4108	748	WerFault.exe	1932-2-0x0000000000400000-0x0000000000486000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1932-2-0x0000000000400000-0x0000000000486000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1932-2-0x0000000000400000-0x0000000000486000-memory.exe"
1⤵
PID:748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 748 -s 216
2⤵
- Program crash
PID:4108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 748 -ip 748
1⤵
PID:4936