3ae907c0f37fa16bda65b338b8a13b6c5183ec242dcfd3640d22a4a6974917d8

Analysis

max time kernel
137s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2022 20:41

Target

2044-66-0x0000000000400000-0x0000000000440000-memory.exe
Size

256KB
MD5

2fd53a82320fa6503555d2f63b938246
SHA1

5ec7c2b7c00fe5227d5687779114ba8d1b1e7365
SHA256

3ae907c0f37fa16bda65b338b8a13b6c5183ec242dcfd3640d22a4a6974917d8
SHA512

4c2b6b7f679e55b377960e317fd2b2860a0ec66a88272a653760de83f7888a5a6352d96ac0af0840c265cf987db9b21cffe728af2825c2164eda33661e6a65f0
SSDEEP

6144:rCteODDlzKpc+sYG8UhMY5J9KvhijeW0Z1l:re3tDSG14l

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1132 3408 WerFault.exe 2044-66-0x0000000000400000-0x0000000000440000-memory.exe

pid	pid_target	process	target process
1132	3408	WerFault.exe	2044-66-0x0000000000400000-0x0000000000440000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2044-66-0x0000000000400000-0x0000000000440000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2044-66-0x0000000000400000-0x0000000000440000-memory.exe"
1⤵
PID:3408
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 88
  2⤵
  - Program crash
  PID:1132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3408 -ip 3408
1⤵
PID:1448