002513d5d95044f7b040be9f82f585f6c42768669670bc80bed096c519092347

Analysis

max time kernel
114s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 15:22

Target

002513d5d95044f7b040be9f82f585f6c42768669670bc80bed096c519092347.exe
Size

72KB
MD5

6e5fcac668d9aa28316555b12878777a
SHA1

7b14876eed322506b1718a10eabf9d4452e60585
SHA256

002513d5d95044f7b040be9f82f585f6c42768669670bc80bed096c519092347
SHA512

f798abfddd51cf35278762b09aa64516e4c1067974b1b14c262d0ac2e63bd95000a046267dd249f0cb9837560331234f7c935b02ff328644c0756cdd3491a00d
SSDEEP

1536:Isqafbkv05wsCLD8dvmN50Mb+KR0Nc8QsJq39:rqXv05wsBdW0e0Nc8QsC9

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
444	2892	WerFault.exe	80
5008	2892	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\002513d5d95044f7b040be9f82f585f6c42768669670bc80bed096c519092347.exe
"C:\Users\Admin\AppData\Local\Temp\002513d5d95044f7b040be9f82f585f6c42768669670bc80bed096c519092347.exe"
1⤵
PID:2892
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2892 -s 260
  2⤵
  - Program crash
  PID:444
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2892 -s 280
  2⤵
  - Program crash
  PID:5008

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2892 -ip 2892
1⤵
PID:4996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2892 -ip 2892
1⤵
PID:4644