a6461875dd348a27586890e78d358fa8735eb0674be58854fd87293ea05022cc

Analysis

max time kernel
137s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
08-11-2023 14:02

Target

2420-1-0x0000000000400000-0x000000000040B000-memory.exe
Size

44KB
MD5

9ed53b9fc28978e0022243574bd9ef90
SHA1

dda728ab1dd50368ed6b6ac07ae1254cb986a2b5
SHA256

a6461875dd348a27586890e78d358fa8735eb0674be58854fd87293ea05022cc
SHA512

f50ff9123191dca3c3e63ec2b93c25916189f726bf0bf3d89e70cce3296bb91989ac19f0078d64c84e360dc57370f9d18b609d39764bd1e15d5dcdb99c79f419
SSDEEP

384:xhnyaz2ypQY5ZkV8qvhyY3Q6oVxYCDCY3WqPakgUt11iyBrUo7MgImBH+Tk:GnHY5ZkO4hyYtoVxYhm1oUt1vnhBL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3340 1776 WerFault.exe 2420-1-0x0000000000400000-0x000000000040B000-memory.exe

pid	pid_target	process	target process
3340	1776	WerFault.exe	2420-1-0x0000000000400000-0x000000000040B000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2420-1-0x0000000000400000-0x000000000040B000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2420-1-0x0000000000400000-0x000000000040B000-memory.exe"
1⤵
PID:1776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1776 -s 340
2⤵
- Program crash
PID:3340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1776 -ip 1776
1⤵
PID:4652

memory/1776-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download