36ba5281391b8a9b45620f14ba8cbcf6b35b653149bf82290e39c3704d6fa14f

Analysis

max time kernel
140s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 02:21

Target

0b797215ccbd64f9649b8789f170ac06.exe
Size

1.1MB
MD5

0b797215ccbd64f9649b8789f170ac06
SHA1

97dc1229c3144b6d53385304b2cde1ce6152fdfe
SHA256

36ba5281391b8a9b45620f14ba8cbcf6b35b653149bf82290e39c3704d6fa14f
SHA512

f1c0d3fe608184cbed27ee738f867d08b29fd55ef663aad588d24738c2fee074ad2cc308f8e4cd9278aebec284f771a0309a6d2089fcfecd84ea7784056fb55e
SSDEEP

12288:l+VLFLEsCM4yMa6rGZ5xCCpRQNU06zmSpT02L7ixCjWoZ60yVOZo8E:iqMrMa245R+U06zZA2U6Dm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2124	2428	WerFault.exe	12

C:\Users\Admin\AppData\Local\Temp\0b797215ccbd64f9649b8789f170ac06.exe
"C:\Users\Admin\AppData\Local\Temp\0b797215ccbd64f9649b8789f170ac06.exe"
1⤵
PID:2428
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2428 -s 1184
  2⤵
  - Program crash
  PID:2124

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2428 -ip 2428
1⤵
PID:4372

memory/2428-1-0x0000000000970000-0x0000000000A8A000-memory.dmp

Filesize
1.1MB

Download
memory/2428-3-0x0000000005B20000-0x00000000060C4000-memory.dmp

Filesize
5.6MB

Download
memory/2428-5-0x0000000005780000-0x0000000005790000-memory.dmp

Filesize
64KB

Download
memory/2428-6-0x0000000005470000-0x000000000547A000-memory.dmp

Filesize
40KB

Download
memory/2428-7-0x0000000005790000-0x00000000057E6000-memory.dmp

Filesize
344KB

Download
memory/2428-4-0x0000000005570000-0x0000000005602000-memory.dmp

Filesize
584KB

Download
memory/2428-2-0x0000000005480000-0x000000000551C000-memory.dmp

Filesize
624KB

Download
memory/2428-0-0x0000000074EA0000-0x0000000075650000-memory.dmp

Filesize
7.7MB

Download
memory/2428-8-0x0000000074EA0000-0x0000000075650000-memory.dmp

Filesize
7.7MB

Download