631d968aaae077e5111a151299ef6fe7e07f8212c897292bb06d8040629ec438

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 16:09

Target

1940-2-0x0000000000400000-0x0000000000486000-memory.exe
Size

536KB
MD5

76330041d9af0fa996414888dd68e25c
SHA1

1a907c909cc06b5908d4c886a38a174ee09bb29d
SHA256

631d968aaae077e5111a151299ef6fe7e07f8212c897292bb06d8040629ec438
SHA512

0c1bf0c249a0f478c69249ef1edead076c8ff46cf3381b15ea35b049f9b4d984b765c9c1fa02cf2951d1f190bcaff2f0489e28c86c7304e2fa25689e662573fa
SSDEEP

3072:TrPI5jSu1GgDgfA4D3zE651N6B35eCf3aIVm5SGfipnjcjVcj5oh5Ttyl:zu1GgDGJrzE651MJd3zk9qpnjEDh5Tk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

500 3332 WerFault.exe 1940-2-0x0000000000400000-0x0000000000486000-memory.exe

pid	pid_target	process	target process
500	3332	WerFault.exe	1940-2-0x0000000000400000-0x0000000000486000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1940-2-0x0000000000400000-0x0000000000486000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1940-2-0x0000000000400000-0x0000000000486000-memory.exe"
1⤵
PID:3332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 216
2⤵
- Program crash
PID:500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3332 -ip 3332
1⤵
PID:3720