4e5fc1e9ddd71d8cd04b8913a1a6ff7ab8220969960f83d3939055c69f374e3a

Analysis

max time kernel
112s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24/11/2022, 01:19

Target

4e5fc1e9ddd71d8cd04b8913a1a6ff7ab8220969960f83d3939055c69f374e3a.exe
Size

41KB
MD5

3484ef7c485d4c759a9e419bda3c1d40
SHA1

207a49ca34f559e60c64749c49769e8393c470ed
SHA256

4e5fc1e9ddd71d8cd04b8913a1a6ff7ab8220969960f83d3939055c69f374e3a
SHA512

6de5c951e7075d889fe9bb3b7af3d9b6af939b6ee689d2c736f8b41003e4fcdd3242b392759bd8360146bf52f47b6f7bbcea41ab729e352dfdfa28e45b0445cc
SSDEEP

768:xvAOQbSEln5IyYpamDjobj8ShSY7mZocy5YyWs:q9ln5IUmDjoX9SYATXs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4920	1504	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\4e5fc1e9ddd71d8cd04b8913a1a6ff7ab8220969960f83d3939055c69f374e3a.exe
"C:\Users\Admin\AppData\Local\Temp\4e5fc1e9ddd71d8cd04b8913a1a6ff7ab8220969960f83d3939055c69f374e3a.exe"
1⤵
PID:1504
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1504 -s 264
  2⤵
  - Program crash
  PID:4920

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1504 -ip 1504
1⤵
PID:4964

memory/1504-132-0x0000000001000000-0x0000000001012000-memory.dmp

Filesize
72KB

Download
memory/1504-133-0x0000000001000000-0x0000000001012000-memory.dmp

Filesize
72KB

Download