5f4c6eed81d96e440c09192c2b751b72f1ec66e07a03246cb8fd9b01e9834f61

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
15-10-2023 19:27

Target

4208-3-0x0000000000400000-0x0000000002287000-memory.exe
Size

30.5MB
MD5

4f43a3a486dbfb019deeba5ae59f25f6
SHA1

004ee44d2a851101dfe371b08fa61047b930170f
SHA256

5f4c6eed81d96e440c09192c2b751b72f1ec66e07a03246cb8fd9b01e9834f61
SHA512

e0e2931a54250d64bf573ae50021926fe08da689531dc0075b61e371b5aa703da0695edd0cebba08cba784e597140fdf97b054582a9d85b203b43791f884dd6e
SSDEEP

3072:drPI5jSu1Fa0v3vdZgXOayiaDoB0Jiyf2mUbC9t1Esa1w/aT:Bu180dGXODfig2mP9Na

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1128 3712 WerFault.exe 4208-3-0x0000000000400000-0x0000000002287000-memory.exe

pid	pid_target	process	target process
1128	3712	WerFault.exe	4208-3-0x0000000000400000-0x0000000002287000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4208-3-0x0000000000400000-0x0000000002287000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4208-3-0x0000000000400000-0x0000000002287000-memory.exe"
1⤵
PID:3712
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3712 -s 216
  2⤵
  - Program crash
  PID:1128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3712 -ip 3712
1⤵
PID:1572