91dd69f25f94275fcae5997a40f9081510aa5af41a9ac3f5d1f5eaebddda8d6c

Analysis

max time kernel
144s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2023 08:18

Target

1964-2-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

11f084b59ba0b09257b9e46318dab816
SHA1

e6eefd9f05bf3d655ed74009c8eb6da269a8a27b
SHA256

91dd69f25f94275fcae5997a40f9081510aa5af41a9ac3f5d1f5eaebddda8d6c
SHA512

413ecc9796fde7346965e821df42609db034252ba70d49a8e687b20240955b2750cb0364aa895865f89476bb377a953f59561d391361cf1a65317365812cfaa5
SSDEEP

3072:WrPI5jSu1aZLaHZ5VYnurTt9epeDNbuSTTNG9AMY8q4LCvr4iZot:mu1aZLU7VYnuF9epeZTNG+MTasyo

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4376 4508 WerFault.exe 1964-2-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
4376	4508	WerFault.exe	1964-2-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1964-2-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1964-2-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:4508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4508 -s 216
2⤵
- Program crash
PID:4376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4508 -ip 4508
1⤵
PID:4356