4f8a0c07303481f57e6b609e861e12556155026eec6a9e49e9306859216e9eb5

Analysis

max time kernel
184s
max time network
205s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
11-12-2022 08:37

Target

2044-55-0x0000000000400000-0x000000000044A000-memory.exe
Size

296KB
MD5

2da5238b89f51299986e23d36a42d8ea
SHA1

7a80c2dc95e156161527d1721bebd6e17723b528
SHA256

4f8a0c07303481f57e6b609e861e12556155026eec6a9e49e9306859216e9eb5
SHA512

c1d69ac51057766dbdea5e0bd908c64a70a7257a0f6cbbc4cfe7d609a2555f2f077dec3dcb0b3bb356fe2b5f3a9851bd34292eaba10b267e577f8b7e12683c48
SSDEEP

3072:pee6O4Desr+vbpA0DcgMrlvooShOt88yYj0ZJ+HsumuehNoGX4AHa15:y7Ks8pUoNwVjUkMZj8DAHa15

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2168 1224 WerFault.exe 2044-55-0x0000000000400000-0x000000000044A000-memory.exe

pid	pid_target	process	target process
2168	1224	WerFault.exe	2044-55-0x0000000000400000-0x000000000044A000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2044-55-0x0000000000400000-0x000000000044A000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2044-55-0x0000000000400000-0x000000000044A000-memory.exe"
1⤵
PID:1224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1224 -s 216
2⤵
- Program crash
PID:2168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1224 -ip 1224
1⤵
PID:1820