a808c5f89b9cf04233d7367e9db97bbc4d2b125224989d3548de2d9106f2a02f

Analysis

max time kernel
135s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23/03/2023, 16:16

Target

1108-68-0x0000000000400000-0x0000000000437000-memory.exe
Size

220KB
MD5

d9ba410a8100bb8faa28d6d93a15f07d
SHA1

fdbef5a1241726a3365da545a1159f2f52967f67
SHA256

a808c5f89b9cf04233d7367e9db97bbc4d2b125224989d3548de2d9106f2a02f
SHA512

91b5a9893e5610d251e654d7c851b63084a09c8c521d22cfd29feceb4f746a483551a5f853883b325a499a0d90a02b854917ec2a4b50bcd51cc912c623774456
SSDEEP

3072:ZqqaM97eOTPiK3DruiiF/XbKjPI18lNAgAEzoHj/LDdN8eWLtrkb8YqcwBj2uFbv:YCteODDmzKdmaWT87trkbg2abv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1976	4988	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\1108-68-0x0000000000400000-0x0000000000437000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1108-68-0x0000000000400000-0x0000000000437000-memory.exe"
1⤵
PID:4988
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 88
  2⤵
  - Program crash
  PID:1976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4988 -ip 4988
1⤵
PID:3260