de60e2a33037341aa685cad7b64573feeef692bdfe2d057a8a78da79d479d232

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
07-06-2023 09:09

Target

576-151-0x0000000000400000-0x0000000000406000-memory.exe
Size

24KB
MD5

34d9124682ce44f8bb642756965c7060
SHA1

f04c55bddd94ac49f2339c269cac2a8f5623a307
SHA256

de60e2a33037341aa685cad7b64573feeef692bdfe2d057a8a78da79d479d232
SHA512

525cf96a7ac07bad1d0a58a8d15074e03bae47e5beabb0c8f80c0cbbb53d4f6e418acd5ffa423b5a60f3bc06dd1dabc82718324bd639f1d9d0f66a0a11b27ec1
SSDEEP

96:viujWjxtYqRQ3ea4W/E/MM4odWLora0Fy/eKW9ZGcp2xFK+gcYOoSM:KujWjlQOa4P/ZbdV6eKxFK+n1M

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2696 4256 WerFault.exe 576-151-0x0000000000400000-0x0000000000406000-memory.exe

pid	pid_target	process	target process
2696	4256	WerFault.exe	576-151-0x0000000000400000-0x0000000000406000-memory.exe

C:\Users\Admin\AppData\Local\Temp\576-151-0x0000000000400000-0x0000000000406000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\576-151-0x0000000000400000-0x0000000000406000-memory.exe"
1⤵
PID:4256

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4256 -s 216
2⤵
- Program crash
PID:2696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 4256 -ip 4256
1⤵
PID:1188