5c020d97bba9ad2e13867ba3a7a94dbc9f962cf9eabd1187b03fddfbf0367be8

Analysis

max time kernel
55s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-02-2023 23:32

Target

4264-139-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

d4fa1e5a298d79e0bcbec0e2cc0ee46a
SHA1

7d557ebfc2399a07f87cb77caf1655b05d0dcbd2
SHA256

5c020d97bba9ad2e13867ba3a7a94dbc9f962cf9eabd1187b03fddfbf0367be8
SHA512

32661f61e8fcf86cb1310e0948c079915e7f82ed1da47a750014eb3649583db3f4925c7ed5292f3b910796fde49b9dcbc9947fb8969ca34e3fe3b6384aec670e
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqUIzmd:nSHIG6mQwGmfOQd8YhY0/EpUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4768 968 WerFault.exe 4264-139-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
4768	968	WerFault.exe	4264-139-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4264-139-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4264-139-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 968 -s 216
2⤵
- Program crash
PID:4768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 968 -ip 968
1⤵
PID:4876