7ea57db3e9a9a6ab0a257ec2d4fc3f5e587627f3341aea978b1c02844dcf2a67

Analysis

max time kernel
90s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 13:58

Target

2640-23-0x0000000000400000-0x0000000000643000-memory.exe
Size

2.3MB
MD5

c3002f64a56f2031f3b3a0e8350b0d67
SHA1

331fcdb81279581994c83e8a17503e87de21e428
SHA256

7ea57db3e9a9a6ab0a257ec2d4fc3f5e587627f3341aea978b1c02844dcf2a67
SHA512

51798b2b707bf6be2a39817f31d852c42a013bfc7d982490a1c5acde22a4ce924a5c722ad75ecc44e4af9aa3e8818e3d7b1df12edac9066df53b7d28d7d9137a
SSDEEP

3072:BsEmMjYYsq/rV7sruvEBr3/UTM9mSiK3WnMGb56j66ZDsSJ+aj:BsHPY7hsyvEBr3cQEKmnMGb56j6aISI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3696	2632	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\2640-23-0x0000000000400000-0x0000000000643000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2640-23-0x0000000000400000-0x0000000000643000-memory.exe"
1⤵
PID:2632
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 216
  2⤵
  - Program crash
  PID:3696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2632 -ip 2632
1⤵
PID:1944