6bb6436c4ddadb0185c69afb8c7502c8c5dcc7d0404fbc090189c8b48e0a079c

Analysis

max time kernel
154s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
10-12-2023 17:25

Target

1468-138-0x0000000000400000-0x000000000040A000-memory.exe
Size

40KB
MD5

61e19c234cbb76e9ed1c34557ce5d7e0
SHA1

25ed23c2cb4b87bf42c000cfb528a2a50877581e
SHA256

6bb6436c4ddadb0185c69afb8c7502c8c5dcc7d0404fbc090189c8b48e0a079c
SHA512

bc48a418cced60a0ffc9d66330a1da343be6f562a1af75c8ab50e4c91f9887e68b3096ce79e8fad4b5325cfe171ab161614944414d83ff1d5fc67eb905bc07f9
SSDEEP

192:a+8C+EKS0O9ejYTDG8bcp4LlzSnieXubWyD9JEBkGxVX7qoNgRJo:aNVjYTDG8gpqZeXTyD3EnxEoNr

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5012 1948 WerFault.exe 1468-138-0x0000000000400000-0x000000000040A000-memory.exe

pid	pid_target	process	target process
5012	1948	WerFault.exe	1468-138-0x0000000000400000-0x000000000040A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1468-138-0x0000000000400000-0x000000000040A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1468-138-0x0000000000400000-0x000000000040A000-memory.exe"
1⤵
PID:1948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1948 -s 224
2⤵
- Program crash
PID:5012

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1948 -ip 1948
1⤵
PID:3824