1c6643b479614340097a8071c9f880688af5a82db7b6e755beafe7301eea1abf

Analysis

max time kernel
97s
max time network
101s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
16-09-2022 11:43

Target

jfilyg7.exe
Size

383KB
MD5

96b5dcad2ade88e0c99e84b4869224e7
SHA1

f23d4988ca9ef6fcf9e219dd249eff9988d5f7c5
SHA256

722c36abd195cce70ee25b48d6e64873262e046eae7433976120a1496f01487d
SHA512

8ed9e7fa921b1c75ac6aec5016c138f213b0ff6341d263783d716db530da076794336bc02d6c9b141850d0250bf11b60d0ac401425dbfd13d8904a359284fb85
SSDEEP

6144:9NYLVv8Annhw3I54dDhfZfx6k/ZuCsmK4XShgtf:tIidDBZflr

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2316 2744 WerFault.exe jfilyg7.exe

pid	pid_target	process	target process
2316	2744	WerFault.exe	jfilyg7.exe

C:\Users\Admin\AppData\Local\Temp\jfilyg7.exe
"C:\Users\Admin\AppData\Local\Temp\jfilyg7.exe"
1⤵
PID:2744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2744 -s 240
2⤵
- Program crash
PID:2316

memory/2744-120-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-121-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-122-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-123-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-124-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-125-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-126-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download
memory/2744-127-0x00000000771E0000-0x000000007736E000-memory.dmp

Filesize
1.6MB

Download