5cf9041ab9e48c6cc245eb7b5e8dddf2440a46fe9e4d23d3241760a0020c395e

Analysis

max time kernel
139s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 15:28

Target

233620x00000000004000000x0000000000486000memory_JC.exe
Size

536KB
MD5

22f872e77fa7e62a9f8dd6bf326f8bac
SHA1

0e05ad3614fa0b2cf0747fc413f45bc8b930d7d4
SHA256

5cf9041ab9e48c6cc245eb7b5e8dddf2440a46fe9e4d23d3241760a0020c395e
SHA512

117dc730ef1d8258564db60d6a3c7a5d85ea1f33c32e2a6c275004b13178d11494ebe062accbf990e50424d266f44f86afda2369b82d6900ece6290aeaf273e0
SSDEEP

6144:zu1HgDGJrF+64zIMHQRWsZA0DlgCY0Tk:aCKf+64NHqZAqlq8

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4956 4776 WerFault.exe 233620x00000000004000000x0000000000486000memory_JC.exe

pid	pid_target	process	target process
4956	4776	WerFault.exe	233620x00000000004000000x0000000000486000memory_JC.exe

C:\Users\Admin\AppData\Local\Temp\233620x00000000004000000x0000000000486000memory_JC.exe
"C:\Users\Admin\AppData\Local\Temp\233620x00000000004000000x0000000000486000memory_JC.exe"
1⤵
PID:4776
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4776 -s 216
  2⤵
  - Program crash
  PID:4956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4776 -ip 4776
1⤵
PID:2080