35b3794b63c30bd32f7f2dc761900974ca1ab3a9238cded200f5dcfbbda9a090

Analysis

max time kernel
88s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
27-03-2023 01:55

Target

2624-299-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

3510b9978c2eb3ab29b6873982f0989b
SHA1

c98a2ea7277ab42f44330ac5967465173bcb95ca
SHA256

35b3794b63c30bd32f7f2dc761900974ca1ab3a9238cded200f5dcfbbda9a090
SHA512

ba73b19383d7f7d2f36fe67c7ea173bf797a4a4c148f033e1c31aa1155b2a40b4398d765edc1c77b55a8e88891d221705def9de90b335b7e0fcdce057e3bcb39
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGio/9o0wVEhKhJ7a:cuQRHexo0n24zVK32RRVmGiqwVbhJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

860 692 WerFault.exe 2624-299-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
860	692	WerFault.exe	2624-299-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2624-299-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2624-299-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:692
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 692 -s 216
  2⤵
  - Program crash
  PID:860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 692 -ip 692
1⤵
PID:1172