6b3a6e6a07e54d5846d56e78a4e060a8217a84b75d6fba60e01552059c11d662

Analysis

max time kernel
146s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 14:28

Target

2204-2-0x0000000000400000-0x000000000228F000-memory.exe
Size

30.6MB
MD5

20486a07107303c135fd6cc5558e9e21
SHA1

18eb328f12601c6314ccd855cd5df4d645be3cf1
SHA256

6b3a6e6a07e54d5846d56e78a4e060a8217a84b75d6fba60e01552059c11d662
SHA512

c406915b562800a6620f93744a566768a860540ca726f4198a7c87fc996cbc6d25b0b74d1ca24e9f3b43b68c15ea3e2614d801dbabbf965de78cdd96b47c29d3
SSDEEP

3072:WrPI5jSu1dZLaHZ5VYnurTtk6IbV418GM7cCtHEaV0AtdQa9l0Ck5bU:mu1dZLU7VYnuFkrdb3Q8l0Zb

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1420 4220 WerFault.exe 2204-2-0x0000000000400000-0x000000000228F000-memory.exe

pid	pid_target	process	target process
1420	4220	WerFault.exe	2204-2-0x0000000000400000-0x000000000228F000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2204-2-0x0000000000400000-0x000000000228F000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2204-2-0x0000000000400000-0x000000000228F000-memory.exe"
1⤵
PID:4220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4220 -s 216
2⤵
- Program crash
PID:1420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4220 -ip 4220
1⤵
PID:1388