662e1e4fb217a496c80471abfc37926432ba8fdade18626d81e34cb7445096ac

Analysis

max time kernel
146s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 04:59

Target

2880-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

4a7572603cc6134ae19dee6a4aa209d2
SHA1

04653fa790b6436c75451dbf377394e27b8ee376
SHA256

662e1e4fb217a496c80471abfc37926432ba8fdade18626d81e34cb7445096ac
SHA512

34bf1325cbf69b488dfe79c7d3e320406f1798de03338b5621a2ffe15777b049030c4ad8b7a28eac3d1fdd920b9898bda4ad2ec95406200fbfc1cc134d905ac5
SSDEEP

3072:erPI5jSu1X5RgfA4D3tACX/VIlBuPMVEOqFo67UFMQBzttxq8i7u5s5c3SPTrbp:uu1X5RGJrtAOVAEPUEOq5UqCwy30TJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4496 2640 WerFault.exe 2880-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
4496	2640	WerFault.exe	2880-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2880-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2880-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:2640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2640 -s 216
2⤵
- Program crash
PID:4496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2640 -ip 2640
1⤵
PID:2992