543b1729ddf97654012f8ff2d8a8d07a2134d8cea712fd1c83cdad00e7c01d9c

Analysis

max time kernel
90s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
17-02-2023 10:07

Target

4272-183-0x0000000000BD0000-0x0000000000BDE000-memory.exe
Size

56KB
MD5

e2ace55326bcb963f9b17d18bbe56f64
SHA1

c70e973157bd687c99122c38c378b1fa4e7ca5f3
SHA256

543b1729ddf97654012f8ff2d8a8d07a2134d8cea712fd1c83cdad00e7c01d9c
SHA512

28ac4614933f04fb84419622ebfdeffb2631813448a3c1f68ccec6166bb9e9b8c72b3ee52573c17a707f8fa4d8f2fdb5e0f83443e300b83360e52c3ee3176f7a
SSDEEP

768:lDK/c+QLoR4jInhpp55dWSlkiidEfUPJqBQPt04:l+/c+5R4jaDtmiuqURq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4860 5016 WerFault.exe 4272-183-0x0000000000BD0000-0x0000000000BDE000-memory.exe

pid	pid_target	process	target process
4860	5016	WerFault.exe	4272-183-0x0000000000BD0000-0x0000000000BDE000-memory.exe

C:\Users\Admin\AppData\Local\Temp\4272-183-0x0000000000BD0000-0x0000000000BDE000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4272-183-0x0000000000BD0000-0x0000000000BDE000-memory.exe"
1⤵
PID:5016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 216
2⤵
- Program crash
PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 5016 -ip 5016
1⤵
PID:4932