0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
02-10-2022 06:22

Target

0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128.exe
Size

96KB
MD5

6c90f4ce98761e270f2a470dcc2f1dd0
SHA1

21226d622e487e837f2164c2a42c10c6bee781d2
SHA256

0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128
SHA512

8bff46c8b1166ac856a4a38fd6ead111725fae5e21af63bb7755e5b79c70278a6281c3dc26863748342850987c7d8dd400537309f1d4e54b38ef13a94bdd79f9
SSDEEP

1536:qT6sk4uXkZXeRrZAfULgu1UTQODnMKbq/2Wp/VRLCdmo:CTuX2uRF+6RUsOT/2FVRLlo

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1324 4992 WerFault.exe 0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128.exe

pid	pid_target	process	target process
1324	4992	WerFault.exe	0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128.exe

C:\Users\Admin\AppData\Local\Temp\0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128.exe
"C:\Users\Admin\AppData\Local\Temp\0871459eed863aba58dbdbf2362f32dc62a7f46f8a21ac206b943f58c74d4128.exe"
1⤵
PID:4992
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4992 -s 248
  2⤵
  - Program crash
  PID:1324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4992 -ip 4992
1⤵
PID:2592

memory/4992-132-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download