8a37f5c3d6f95d7acdbfb0365a47b21d3deae2579d414a131334523a317e200c

Analysis

max time kernel
94s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 14:17

Target

004c4242e9a805eba8ca4f560dbb3fb1.exe
Size

4.8MB
MD5

004c4242e9a805eba8ca4f560dbb3fb1
SHA1

a93b6b1f925ee36866ffb60a7596b868b71e3783
SHA256

8a37f5c3d6f95d7acdbfb0365a47b21d3deae2579d414a131334523a317e200c
SHA512

213ab7ed6988d3039ef0c69311dd58d85eec258d8c38050c3678761f17b435582621c24c0b557e349b72ca60e6aec166698dc976833226739f8b6eb47895e0ea
SSDEEP

98304:eHa9lkUVBG/ioKBFewJrUSOz69wbLen3iIIz/d4Jwy/ly4yH6PLVNIKnPxfW:eHa9OUDSiBTewJ7Oz69wn6Iz/d4JXN3g

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1088	1368	WerFault.exe	16

C:\Users\Admin\AppData\Local\Temp\004c4242e9a805eba8ca4f560dbb3fb1.exe
"C:\Users\Admin\AppData\Local\Temp\004c4242e9a805eba8ca4f560dbb3fb1.exe"
1⤵
PID:1368
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1368 -s 848
  2⤵
  - Program crash
  PID:1088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1368 -ip 1368
1⤵
PID:3656

memory/1368-0-0x0000000000400000-0x00000000016DE000-memory.dmp

Filesize
18.9MB

Download
memory/1368-1-0x0000000000400000-0x00000000016DE000-memory.dmp

Filesize
18.9MB

Download
memory/1368-2-0x0000000004450000-0x0000000004451000-memory.dmp

Filesize
4KB

Download
memory/1368-3-0x0000000000400000-0x00000000016DE000-memory.dmp

Filesize
18.9MB

Download