ac4a5e7b0c9ba60b0ed62f075fd3d237996f613fabfd4ab427eea73d93b34b48

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 13:13

Target

4660-285-0x0000000001160000-0x00000000015E9000-memory.exe
Size

4.5MB
MD5

84b055c52cb741dc88a79436096867fc
SHA1

23de0bd436d63cadef2110a95a133343ed5a5fb5
SHA256

ac4a5e7b0c9ba60b0ed62f075fd3d237996f613fabfd4ab427eea73d93b34b48
SHA512

fcdf748808ef5ad8cbb2f5c73c567972cd3b086309284c3542eb4e6edced1305b1145754615fb305f4e85563e3bc5ed3af7f938bf8ea9285fc87844968a0cc10
SSDEEP

49152:m7Yn7wthy5qDGSTdLkoEsCV+83uj+hH5Uz1OvkFpK:m7z3X5LLEFV+v+x5URRv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4532 2700 WerFault.exe 4660-285-0x0000000001160000-0x00000000015E9000-memory.exe

pid	pid_target	process	target process
4532	2700	WerFault.exe	4660-285-0x0000000001160000-0x00000000015E9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4660-285-0x0000000001160000-0x00000000015E9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4660-285-0x0000000001160000-0x00000000015E9000-memory.exe"
1⤵
PID:2700

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2700 -s 216
2⤵
- Program crash
PID:4532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2700 -ip 2700
1⤵
PID:680