09a48d75f3a1131cb0635089604c573178c0018e6596819e6640bad490f4d513

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
14-10-2022 11:16

Target

09a48d75f3a1131cb0635089604c573178c0018e6596819e6640bad490f4d513.exe
Size

98KB
MD5

66a1fe106af9cf3b0c5d04bb51557ef0
SHA1

dab0c00bc34de4793021be58407f196836c2daaa
SHA256

09a48d75f3a1131cb0635089604c573178c0018e6596819e6640bad490f4d513
SHA512

4462dc6402d9da05e2aa535fe35740de085e7de1ba910a9ec5a283d3cf5a4a5585a8c76e9489d62922656d4f5277f76da78c8dc73d2979ab64bc1236a9e59505
SSDEEP

1536:3IOvM1l3QnihqKajjod8OTZISGYEWqaxCD3D3B2eTPvk7B05N7ACFL0nm78i2:9sldPaDOTp9xyke0B27ACFL0nY

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
5040	4964	WerFault.exe	82
3220	4964	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\09a48d75f3a1131cb0635089604c573178c0018e6596819e6640bad490f4d513.exe
"C:\Users\Admin\AppData\Local\Temp\09a48d75f3a1131cb0635089604c573178c0018e6596819e6640bad490f4d513.exe"
1⤵
PID:4964
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 280
  2⤵
  - Program crash
  PID:5040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 300
  2⤵
  - Program crash
  PID:3220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4964 -ip 4964
1⤵
PID:4592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4964 -ip 4964
1⤵
PID:3032

memory/4964-132-0x0000000000700000-0x000000000071E000-memory.dmp

Filesize
120KB

Download
memory/4964-133-0x0000000000700000-0x000000000071E000-memory.dmp

Filesize
120KB

Download