e8bd253985a70c4f160029db626e8598899d9a79602412c7263976f540e75db5

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2023 14:16

Target

1044-268-0x0000000000B30000-0x0000000000FB9000-memory.exe
Size

4.5MB
MD5

de5161cb05253093550aa401bffe4f22
SHA1

43c8e87c93d123e23ddfbf87d41219d531e0ba79
SHA256

e8bd253985a70c4f160029db626e8598899d9a79602412c7263976f540e75db5
SHA512

c2201404ba90ce5c30d41345e7b695e50e67696040e9403f1a7eee7c8355290a4cbd24998dd41e679d9116fbcbcae2ea570f0765bf240aa3307ce32cd699667e
SSDEEP

49152:YPB8RhlE0my5qsV2SkLk0EsCV+83uj+hH5Uz1OvOFpK:YpBtIILfEFV+v+x5URvv

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4980 4192 WerFault.exe 1044-268-0x0000000000B30000-0x0000000000FB9000-memory.exe

pid	pid_target	process	target process
4980	4192	WerFault.exe	1044-268-0x0000000000B30000-0x0000000000FB9000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1044-268-0x0000000000B30000-0x0000000000FB9000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1044-268-0x0000000000B30000-0x0000000000FB9000-memory.exe"
1⤵
PID:4192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4192 -s 216
2⤵
- Program crash
PID:4980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4192 -ip 4192
1⤵
PID:4876