d4363db314f0f421aaf7edfa336cc9d1f6a342162b0393cdfbb4a76591e48c28

Analysis

max time kernel
114s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2023, 07:18

Target
1196-56-0x0000000000400000-0x000000000044C000-memory.exe
Size 304KB
Sample230308-h4xxfaeb5v
SHA256 d4363db314f0f421aaf7edfa336cc9d1f6a342162b0393cdfbb4a76591e48c28
MD5 4a2c7f9367341470bb9a064c40c25893
SHA1 6f1a80a991c52cd8274b43597eb3b7692b2782b3
SHA512 bae0bd2b904761d316804a87ee9f63053e8667dd9347ca886f46bda34f9b7b3f665e4d78670396507c1dce04e9d83b2663ab1a7e92d2f08817d3d9ead9f81872
SSDEEP 3072:VfKWrNoVUE3Hn5PcN6ugTCIKmO8YUAWDE/Rp9QpFGH52c:RKWrOVUuGNYDlO8YI4Zp9Qz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2456	3332	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\1196-56-0x0000000000400000-0x000000000044C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1196-56-0x0000000000400000-0x000000000044C000-memory.exe"
1⤵
PID:3332
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 216
  2⤵
  - Program crash
  PID:2456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3332 -ip 3332
1⤵
PID:4124