268a3de609212d5c407d4745a9d5699e75f1396e6c13b67c1970f2d837e73a95

Analysis

max time kernel
64s
max time network
3s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 21:46

Target

268a3de609212d5c407d4745a9d5699e75f1396e6c13b67c1970f2d837e73a95.exe
Size

612KB
MD5

08ef5db4476a37c196ff7edc64393c7c
SHA1

91b046ffe773029260a22536d8d2837851cb393b
SHA256

268a3de609212d5c407d4745a9d5699e75f1396e6c13b67c1970f2d837e73a95
SHA512

95af317648c99a2c8920574402a79d8a6530b8c9efcae46d8698a139edacc29774b5606ac9bfb19dcb40e350990f88fbf79a61077ee244d614cb730787556da5
SSDEEP

6144:ZMmY5yrfyHzy8fwRASAywPGvmPrps0q4oMOOyQlTgALXqo1jmUZxL6xQGQgg:ZZ0yrOGtRS9Gvmg4oMOOPZNLXqs76P

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3272	1404	WerFault.exe	74

C:\Users\Admin\AppData\Local\Temp\268a3de609212d5c407d4745a9d5699e75f1396e6c13b67c1970f2d837e73a95.exe
"C:\Users\Admin\AppData\Local\Temp\268a3de609212d5c407d4745a9d5699e75f1396e6c13b67c1970f2d837e73a95.exe"
1⤵
PID:1404
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1404 -s 352
  2⤵
  - Program crash
  PID:3272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 1404 -ip 1404
1⤵
PID:4544

memory/1404-132-0x0000000000400000-0x000000000049C000-memory.dmp

Filesize
624KB

Download
memory/1404-133-0x0000000000400000-0x000000000049C000-memory.dmp

Filesize
624KB

Download
memory/1404-134-0x0000000000400000-0x000000000049C000-memory.dmp

Filesize
624KB

Download