cbe8b8121f2ccd062538381970468d67bfb4085f53aa325d973fa28b60b6e5bd

Analysis

max time kernel
223s
max time network
255s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
10-10-2023 22:17

Target

2168-2-0x0000000000400000-0x0000000000450000-memory.exe
Size

320KB
MD5

8d9720b04ae9ed0c876bd10726201c7f
SHA1

65283ad184902f913408fb311b0af3bf3c691798
SHA256

cbe8b8121f2ccd062538381970468d67bfb4085f53aa325d973fa28b60b6e5bd
SHA512

5b0f90af4e5cd564dfc92ea3f48ed2ea803514535abc77822ae834ced92eeb0b6d57cd0e9a1c62d0da371eb6334f7c8f46b10ad2bb40b68b1468452df76d0781
SSDEEP

6144:uu1C5RGJr5ffE31kwsQODpAkVyakH7+WMxNTf:3WwTf8lDsQsVyaOC5

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3680 3172 WerFault.exe 2168-2-0x0000000000400000-0x0000000000450000-memory.exe

pid	pid_target	process	target process
3680	3172	WerFault.exe	2168-2-0x0000000000400000-0x0000000000450000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2168-2-0x0000000000400000-0x0000000000450000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2168-2-0x0000000000400000-0x0000000000450000-memory.exe"
1⤵
PID:3172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3172 -s 216
2⤵
- Program crash
PID:3680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3172 -ip 3172
1⤵
PID:4800