47cbe4b3c8c5f516da6fc9bc7dc7d2783bff156070974fc399c30e0dfdd0208d

Analysis

max time kernel
90s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-01-2023 19:25

Target

4560-149-0x00000000008F0000-0x0000000000D79000-memory.exe
Size

4.5MB
MD5

4249a73f796b9efa8f26ee780a09190d
SHA1

896653e28fee444bdae3671849947985f748be18
SHA256

47cbe4b3c8c5f516da6fc9bc7dc7d2783bff156070974fc399c30e0dfdd0208d
SHA512

0c6775ec9cac557b219fabe4ebc5d6269fb1fd643ebfc7735d9c39813658aae58cb8ad00244f3a3c9bbc18fa50eae0c02bfadcc85d870586e4934e461e754abf
SSDEEP

49152:0C3IUN/Mvuy5q4sm3GLkBEsCV+83uj+hH5Uz1OvlFpK:0mIlGc8LeEFV+v+x5URkv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2460 476 WerFault.exe 4560-149-0x00000000008F0000-0x0000000000D79000-memory.exe

pid	pid_target	process	target process
2460	476	WerFault.exe	4560-149-0x00000000008F0000-0x0000000000D79000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4560-149-0x00000000008F0000-0x0000000000D79000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4560-149-0x00000000008F0000-0x0000000000D79000-memory.exe"
1⤵
PID:476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 476 -s 216
2⤵
- Program crash
PID:2460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 476 -ip 476
1⤵
PID:2456