919737f2d4e67da687f4b43ed004032403a5931b4bb60e5b2a6882de79ec39f0

Analysis

max time kernel
62s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
28-03-2023 08:06

Target

3508-344-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

375dc54b9e4ba255e535c5a4b9f264fa
SHA1

bc298b6d3d9bdb39b00d06950273d51c13d68ca3
SHA256

919737f2d4e67da687f4b43ed004032403a5931b4bb60e5b2a6882de79ec39f0
SHA512

91ced8bc44b43a561ad6fcc318170a854d7c87e079eb60eacec22e7ebf795a55946fb0dc982af4b3aa342d0b98802dce75705239c60c85d357844484dbb3c114
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGio/9o0wVEhKhJOa:cuQRHexo0n24zVK32RRVmGiqwVbhY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1644 632 WerFault.exe 3508-344-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
1644	632	WerFault.exe	3508-344-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\3508-344-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\3508-344-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 632 -s 216
2⤵
- Program crash
PID:1644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 632 -ip 632
1⤵
PID:5028