673c00df2f452a08ba8f04840697162a927cbd5b4fa995d9787cb636ad396af6

Analysis

max time kernel
143s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
10-08-2023 11:04

Target

673c00df2f452a08ba8f04840697162a927cbd5b4fa995d9787cb636ad396af6.exe
Size

862KB
MD5

8f246355b24f2547c03edc128aea377e
SHA1

352b5b12807c8573168838751547ea63f58a9b0a
SHA256

673c00df2f452a08ba8f04840697162a927cbd5b4fa995d9787cb636ad396af6
SHA512

36dfd95982af2892b2b7fd9ffdf44821e9ee22ed5d2f81c4f74815fa4f9d7ccf6e285a6fe52c93c3bbc4d40f5655e824665d828aa02e4d3e45175b2ba4a67792
SSDEEP

24576:fBRYHenxLamX32AK07IDOlGrF+1CJzwRM4z3:fBRFVai32i7IaeF+AwRTb

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3852	3820	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\673c00df2f452a08ba8f04840697162a927cbd5b4fa995d9787cb636ad396af6.exe
"C:\Users\Admin\AppData\Local\Temp\673c00df2f452a08ba8f04840697162a927cbd5b4fa995d9787cb636ad396af6.exe"
1⤵
PID:3820
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3820 -s 480
  2⤵
  - Program crash
  PID:3852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3820 -ip 3820
1⤵
PID:5092

memory/3820-133-0x0000000000400000-0x0000000000525000-memory.dmp

Filesize
1.1MB

Download
memory/3820-134-0x0000000075F40000-0x0000000076155000-memory.dmp

Filesize
2.1MB

Download
memory/3820-4008-0x0000000000400000-0x0000000000525000-memory.dmp

Filesize
1.1MB

Download