c8de958b277743c2cc6b0d2b7d23fb546bac7b436e0a8bd6f979763ed2838bcb

Analysis

max time kernel
127s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
18-09-2023 16:59

Target

211200x00000000004000000x000000000043D000memory_JC.exe
Size

244KB
MD5

f13e2d6c25e9664980cda9c027c9fd66
SHA1

89092a839572be0b268d17f0b9dee1e425f8d9c5
SHA256

c8de958b277743c2cc6b0d2b7d23fb546bac7b436e0a8bd6f979763ed2838bcb
SHA512

09f7b367163db65590bce8e7174865bccca04a39be4c64ffce1e6d48ac70f17407abd080195cefc6c7b8bcc5b62d8e336a979b88365fda82b223c7bbd487d2b0
SSDEEP

1536:UYz/E8hW9NdYAygNlvhIoOB9SAKD7PNch1ZmmImh1ADN8blGe5SagvHLNaV8AJ3n:Um/E8k9ZjpIn+zNch12KbAwSaSoJSp8

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4408 4648 WerFault.exe 211200x00000000004000000x000000000043D000memory_JC.exe

pid	pid_target	process	target process
4408	4648	WerFault.exe	211200x00000000004000000x000000000043D000memory_JC.exe

C:\Users\Admin\AppData\Local\Temp\211200x00000000004000000x000000000043D000memory_JC.exe
"C:\Users\Admin\AppData\Local\Temp\211200x00000000004000000x000000000043D000memory_JC.exe"
1⤵
PID:4648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4648 -s 216
2⤵
- Program crash
PID:4408

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4648 -ip 4648
1⤵
PID:2952

memory/4648-0-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download