4632482eff98645a9ca80d7a2363493b027dac51e788ce67c053f5e2ed0a3663

Analysis

max time kernel
63s
max time network
63s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
26/04/2024, 21:02

Target

tmp.exe
Size

449KB
MD5

348a0f80d665614382ad0d872fb0442d
SHA1

f5a62424f5f8ce78f92f6045b9554246cf39ae0a
SHA256

4632482eff98645a9ca80d7a2363493b027dac51e788ce67c053f5e2ed0a3663
SHA512

181c98ba1b1621ef8aa1b37464be44c1f396727cec29976ca49d329bc17d191349a635d1b47db1dcc0e7e3297bb1cf49281642450ab550f8a8606450f593e1d7
SSDEEP

12288:UguknPtI9oifhEvyzH3Ig4t5Ri3zg8kQAX6YK2:znFRiySH3Ilt5Ri3rkT6Yd

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3628	744	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
PID:744
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 744 -s 740
  2⤵
  - Program crash
  PID:3628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 744 -ip 744
1⤵
PID:3760

memory/744-2-0x0000000005C00000-0x0000000005C6D000-memory.dmp

Filesize
436KB

Download
memory/744-1-0x0000000004260000-0x0000000004360000-memory.dmp

Filesize
1024KB

Download
memory/744-3-0x0000000000400000-0x0000000004061000-memory.dmp

Filesize
60.4MB

Download
memory/744-7-0x0000000005C00000-0x0000000005C6D000-memory.dmp

Filesize
436KB

Download
memory/744-6-0x0000000004260000-0x0000000004360000-memory.dmp

Filesize
1024KB

Download
memory/744-5-0x0000000000400000-0x0000000004061000-memory.dmp

Filesize
60.4MB

Download
memory/744-10-0x0000000000400000-0x0000000004061000-memory.dmp

Filesize
60.4MB

Download
memory/744-12-0x0000000000400000-0x0000000004061000-memory.dmp

Filesize
60.4MB

Download