13d8b03c68361ecd822b399209b966a825dd524c0154bd2aae6be41fbc39cb58

Analysis

max time kernel
137s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05-11-2024 13:59

Target

2680-14-0x0000000000400000-0x0000000000439000-memory.exe
Size

228KB
MD5

18528a53941c2e26b1baddde27856e87
SHA1

9a92d9a4a6cafb9cf86a2bcb9fbe10a4c4dd40ee
SHA256

13d8b03c68361ecd822b399209b966a825dd524c0154bd2aae6be41fbc39cb58
SHA512

10fd476ff7d9fdf3fd2e27eaad5c013919bd73ab4f3aff56f953d104bf54c6f8b96cc08a32d7f5e2c36fe7728ccdcaa034da0503f97ee2e3af2a5eda37786147
SSDEEP

6144:BSt0dHgZzKE8INAgKjV5Cjbvk5Hbe7fMuJN07TLfKbl/ubLjnX:BO0WyKAgKjV5Cjbvk5Hbe7fhJN07TcA3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1956	1572	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\2680-14-0x0000000000400000-0x0000000000439000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2680-14-0x0000000000400000-0x0000000000439000-memory.exe"
1⤵
PID:1572
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1572 -s 84
  2⤵
  - Program crash
  PID:1956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1572 -ip 1572
1⤵
PID:4160