c10e04e8e2df3fe19aceec713242102c425158737b46c0167cad67e6dffe596c

Analysis

max time kernel
140s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 04:53

Target

1384-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

54195cc1cd96ec59b101a162387739e8
SHA1

5cc97b42c9c3ad0d7b876b8dc8432c9eba0afe0a
SHA256

c10e04e8e2df3fe19aceec713242102c425158737b46c0167cad67e6dffe596c
SHA512

1bc6b45ea3792aef08bdfb8caadbfc1df980156caca9de474bc9ed68276c11369144e4b7d64166520482329890e3e3eb9726ad27f81d7ed51d278ea5dbe35da1
SSDEEP

3072:KrPI5jSu1ftEPrYLubTXvSQjdz1dcDSQlgrrWX3Sy47n5clUDVDopTWO:iu1ftEPr7fXvSggT4C3SwlU5YTj

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3692 1564 WerFault.exe 1384-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
3692	1564	WerFault.exe	1384-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1384-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1384-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:1564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1564 -s 216
2⤵
- Program crash
PID:3692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1564 -ip 1564
1⤵
PID:4872