4e0252d62591a1f8468a15bbb51767e69c1e745f58fdc8e75a45d214503aeaaf

Analysis

max time kernel
90s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
08-02-2023 18:59

Target

1552-77-0x0000000000400000-0x00000000004A2000-memory.exe
Size

648KB
MD5

e2cd4e4a473be1b7c3a26da808c38b17
SHA1

9cb4afd8264cd1892d4c6d462cdfa1ef3717b2be
SHA256

4e0252d62591a1f8468a15bbb51767e69c1e745f58fdc8e75a45d214503aeaaf
SHA512

f7e63cc7d5e26d39d69c310352b01bf826bbb06611374482ac31373de5fb978b198a5ecf8ea39b70e01bc2ac4e0a5d5f8faad5cdef7ae099aef38aa4c3dc0f31
SSDEEP

1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqaIzmd:nSHIG6mQwGmfOQd8YhY0/EjUG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1648 4940 WerFault.exe 1552-77-0x0000000000400000-0x00000000004A2000-memory.exe

pid	pid_target	process	target process
1648	4940	WerFault.exe	1552-77-0x0000000000400000-0x00000000004A2000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1552-77-0x0000000000400000-0x00000000004A2000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1552-77-0x0000000000400000-0x00000000004A2000-memory.exe"
1⤵
PID:4940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 216
2⤵
- Program crash
PID:1648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4940 -ip 4940
1⤵
PID:4936