d3175f055ec2997cb1976a6ddf10819ab49f0fabb8a56affbcde3240af93b29e

Analysis

max time kernel
91s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 20:16

Target

d3175f055ec2997cb1976a6ddf10819ab49f0fabb8a56affbcde3240af93b29e.exe
Size

404KB
MD5

5aa187add864c72b96fec0d90c9cf470
SHA1

9e072ec6000dd5bbb3be4eac6a45c429f1e0a8a1
SHA256

d3175f055ec2997cb1976a6ddf10819ab49f0fabb8a56affbcde3240af93b29e
SHA512

8486772815cc64d7e274fa10fd9611447b08abfc331a049404cbc8f707b23f30b334926e50e3a93524c45ed802381eb26a6615a19ca2f9ed972a7bd9a2025f54
SSDEEP

6144:1cl7LB6uuMvwYRRhR7aIbon6kOkh+PodAhpSE/f3dh66M6USQn83ZTfr9Dlcosgq:u7kuuMvwYJboyAKBFYCG859DtcD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4548	4880	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\d3175f055ec2997cb1976a6ddf10819ab49f0fabb8a56affbcde3240af93b29e.exe
"C:\Users\Admin\AppData\Local\Temp\d3175f055ec2997cb1976a6ddf10819ab49f0fabb8a56affbcde3240af93b29e.exe"
1⤵
PID:4880
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4880 -s 516
  2⤵
  - Program crash
  PID:4548

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4880 -ip 4880
1⤵
PID:5020

memory/4880-132-0x0000000002200000-0x0000000002206000-memory.dmp

Filesize
24KB

Download
memory/4880-133-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download