631d968aaae077e5111a151299ef6fe7e07f8212c897292bb06d8040629ec438

Analysis

max time kernel
139s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 15:31

Target

194020x00000000004000000x0000000000486000memory_JC.exe
Size

536KB
MD5

76330041d9af0fa996414888dd68e25c
SHA1

1a907c909cc06b5908d4c886a38a174ee09bb29d
SHA256

631d968aaae077e5111a151299ef6fe7e07f8212c897292bb06d8040629ec438
SHA512

0c1bf0c249a0f478c69249ef1edead076c8ff46cf3381b15ea35b049f9b4d984b765c9c1fa02cf2951d1f190bcaff2f0489e28c86c7304e2fa25689e662573fa
SSDEEP

3072:TrPI5jSu1GgDgfA4D3zE651N6B35eCf3aIVm5SGfipnjcjVcj5oh5Ttyl:zu1GgDGJrzE651MJd3zk9qpnjEDh5Tk

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1088 3200 WerFault.exe 194020x00000000004000000x0000000000486000memory_JC.exe

pid	pid_target	process	target process
1088	3200	WerFault.exe	194020x00000000004000000x0000000000486000memory_JC.exe

C:\Users\Admin\AppData\Local\Temp\194020x00000000004000000x0000000000486000memory_JC.exe
"C:\Users\Admin\AppData\Local\Temp\194020x00000000004000000x0000000000486000memory_JC.exe"
1⤵
PID:3200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3200 -s 216
2⤵
- Program crash
PID:1088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3200 -ip 3200
1⤵
PID:1080