00d86d4ad4045dc64804a50b63f46342f2a31285f536795b6ed697a94b54ebae

Analysis

max time kernel
143s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2023, 10:15

Target
2916-14-0x0000000000400000-0x0000000000420000-memory.exe
Size 128KB
Sample231012-magetacf3v
SHA256 00d86d4ad4045dc64804a50b63f46342f2a31285f536795b6ed697a94b54ebae
MD5 9ccafc8b56fb04f56918d4ea1ed909ed
SHA1 cd7989a2959f286e16b00f6e9e9e9568b6c7db5d
SHA512 431a0c65cb7f0cd5ce917724d57412c33801bf589906221387300d1f944a481490dc24e76391d44800ce4f42e26172b7f14acf535675711050e99c8da8e9bdd6
SSDEEP 3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgi:faO1tme++wi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3640	4232	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2916-14-0x0000000000400000-0x0000000000420000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2916-14-0x0000000000400000-0x0000000000420000-memory.exe"
1⤵
PID:4232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4232 -s 216
  2⤵
  - Program crash
  PID:3640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4232 -ip 4232
1⤵
PID:3160