0a6a797db8bf4fbbd1be20a614117f5af5d5bbe525f1fdf389c9191b684022cb

Analysis

max time kernel
140s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 11:57

Target

2052-2-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

77c8fc819e901f75ef383944bfce85a7
SHA1

5a9b6be0d35d3285e645f0b6d157f60177f9bbf0
SHA256

0a6a797db8bf4fbbd1be20a614117f5af5d5bbe525f1fdf389c9191b684022cb
SHA512

58fc0ba650b246b2f6cf72bb6c5f3422853ec697e51fcca57129f5db131f67d1ea71e124293178f405efbe6bc19cc456ac7d22e0e362c8726a78432f2ef3d913
SSDEEP

3072:KrPI5jSu1NtEPrYLubTtT+MXpZSylO6d1v01wtialvaTAIns5cCZTrbp:iu1NtEPr7ftznPO6dVQWIBgTJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1864 3488 WerFault.exe 2052-2-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
1864	3488	WerFault.exe	2052-2-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2052-2-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2052-2-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:3488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3488 -s 216
2⤵
- Program crash
PID:1864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3488 -ip 3488
1⤵
PID:3948