e43a0289d68404c82bdb9dec5074ee94ddb141992a58d3ae485be39053fa7bef

Analysis

max time kernel
140s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
05-10-2023 19:59

Target

2552-3-0x0000000000400000-0x00000000005A7000-memory.exe
Size

1.7MB
MD5

126cd1ffcbbf04fa0f6c8f384f2326b2
SHA1

6cd3415d613468fc519bbc6be91bc5f5ffdeba37
SHA256

e43a0289d68404c82bdb9dec5074ee94ddb141992a58d3ae485be39053fa7bef
SHA512

f21680a8e59d02f55a39f7b6c269911e92787ac307ce79f07fbea726970e37fd11dc8f7ca01d40f0463a9a0993e50e8785b0ca51a326d3aa341f1c2b46d03a96
SSDEEP

3072:6DVCyFxSYACXF8pIAwdd+zUnH+R3LGp547cKA5Z4P:6DVCynACXF8pIj3+wH8bw47904

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2268	4328	WerFault.exe	81
1176	4328	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2552-3-0x0000000000400000-0x00000000005A7000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2552-3-0x0000000000400000-0x00000000005A7000-memory.exe"
1⤵
PID:4328
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 216
  2⤵
  - Program crash
  PID:2268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 220
  2⤵
  - Program crash
  PID:1176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4328 -ip 4328
1⤵
PID:3988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4328 -ip 4328
1⤵
PID:388