457662251da30750dc41fc1052444ae3c65c1bf15b3c69ce71135a919cebedc3

Analysis

max time kernel
89s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 00:58

Target

4820-153-0x00000000007E0000-0x0000000000C69000-memory.exe
Size

4.5MB
MD5

9bcddf4bb5eef4bab9ed6562bec28b02
SHA1

1d995f5d7513ecf461d37d852a9cb752c3f467aa
SHA256

457662251da30750dc41fc1052444ae3c65c1bf15b3c69ce71135a919cebedc3
SHA512

fc43b2aeff832266eb8d97ae37e79663b2038322f530d23be2a263ce0d2dfe7db50d24912ec8560dec318f3be74a0dfdd4cd27ddf8c0fcf115de4e0b89392497
SSDEEP

49152:ackARKSry5qJ+W2VLkoEsCV+83uj+hH5Uz1OvJFpK:acESNwLzEFV+v+x5URsv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4556 4924 WerFault.exe 4820-153-0x00000000007E0000-0x0000000000C69000-memory.exe

pid	pid_target	process	target process
4556	4924	WerFault.exe	4820-153-0x00000000007E0000-0x0000000000C69000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4820-153-0x00000000007E0000-0x0000000000C69000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4820-153-0x00000000007E0000-0x0000000000C69000-memory.exe"
1⤵
PID:4924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 216
2⤵
- Program crash
PID:4556

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4924 -ip 4924
1⤵
PID:1592