80d76f6097355a6bbf979dfb1b80adab93c0791eab6ec8f284a10d6275e6193f

Analysis

max time kernel
90s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
18-12-2022 00:53

Target

2640-157-0x0000000000400000-0x0000000000460000-memory.exe
Size

384KB
MD5

b4a2772576caada2f2b6ffb59a20f169
SHA1

35e021d825ac688d0ebefc26b785404e65bbbcea
SHA256

80d76f6097355a6bbf979dfb1b80adab93c0791eab6ec8f284a10d6275e6193f
SHA512

939233a62390fd12b2cb19c0c834f02fda7560863b1e717e3b6da8001e2e23407a59ef3b2ba4113f2bcc5805510efabfbd60ad49663be92dd477ed188fcb8bcc
SSDEEP

6144:6PVCneO+XFupIVi2CRwhbKLg3CicqU0VC:u8p6Fupd2SR7O

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
808	2876	WerFault.exe	81
4324	2876	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2640-157-0x0000000000400000-0x0000000000460000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2640-157-0x0000000000400000-0x0000000000460000-memory.exe"
1⤵
PID:2876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2876 -s 216
  2⤵
  - Program crash
  PID:808
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2876 -s 220
  2⤵
  - Program crash
  PID:4324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2876 -ip 2876
1⤵
PID:4440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2876 -ip 2876
1⤵
PID:384