7b104b4e828887a67ab594049304e955e66ca2f034026dcbf055aab640f2ee1b

Analysis

max time kernel
143s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2023 03:46

Target

2612-18-0x0000000000400000-0x0000000000453000-memory.exe
Size

332KB
MD5

21030904c78d7584b271b6d0718339b2
SHA1

c9dd4e87a42163d86a21f467137d0dc3c2dbf1f2
SHA256

7b104b4e828887a67ab594049304e955e66ca2f034026dcbf055aab640f2ee1b
SHA512

3e81ef39689f8e48650a5a2c66f235680622b0de3496bb2527a3ac6536ed732c5671a754b60eeae9bf2d5781a04417a3eaa44d1df28ce7fc2b2b7fe1806902ae
SSDEEP

6144:ATt0/HgmzKtBkKp01LeI4xjQwk4k60wB:A50rukKpbxjq4h0q

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4760 1976 WerFault.exe 2612-18-0x0000000000400000-0x0000000000453000-memory.exe

pid	pid_target	process	target process
4760	1976	WerFault.exe	2612-18-0x0000000000400000-0x0000000000453000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2612-18-0x0000000000400000-0x0000000000453000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2612-18-0x0000000000400000-0x0000000000453000-memory.exe"
1⤵
PID:1976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1976 -s 84
2⤵
- Program crash
PID:4760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1976 -ip 1976
1⤵
PID:2148