3c46341f5a50dc06e613def949980c458d0c1a05f5d401f7b22602df9b87bd45

Analysis

max time kernel
129s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
14/02/2023, 20:26

Target

1636-76-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

bff0208b62ae227100f65b9b7bfeca3d
SHA1

dc67cdd0193dc1241bbf90acebeb760c0e3a39c6
SHA256

3c46341f5a50dc06e613def949980c458d0c1a05f5d401f7b22602df9b87bd45
SHA512

2cd90b7a006e477e99bc87cb3a807eae434ea3e5943542aec4429f81dcafb5b8cc5e47e88ee0474b80e1785f18073b1387e99efa7f9adb4181039b7e0c23ce28
SSDEEP

6144:MCteODDUzKekLV6Bta6dtJmakIM5IskxrgztsLP:Me3cELV6BtpmkFs2rct

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
440	4824	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1636-76-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1636-76-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:4824
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4824 -s 84
  2⤵
  - Program crash
  PID:440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4824 -ip 4824
1⤵
PID:1568