f9bd45c2a8e79aa58718335f095feff5ba66564f5581514ae439ddf2f233341d

Analysis

max time kernel
155s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2022 03:48

Target

b4d79d938c59ac9dde8e6694cb592150.exe
Size

638KB
MD5

b4d79d938c59ac9dde8e6694cb592150
SHA1

87f94a89b7f183ce26a81a6ac5094c726046db30
SHA256

f9bd45c2a8e79aa58718335f095feff5ba66564f5581514ae439ddf2f233341d
SHA512

d6e69c50de67bd51a11cc398d6b1cf992d902bf77c083a56f91c4c512269ef6f61a4507acb40d8be090900c3161065d7a9cb0cbbcef7fa2b41d8216d5190d1b4
SSDEEP

6144:atbRgxNUu/WCYGQNzHhsFvkXWBQ0k4SfllfbrkKCZQ0rwVll9oQYGxt3Mn3:aNRgcpCYrNzBUlSzhdbOrsCQYGW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4468	2520	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\b4d79d938c59ac9dde8e6694cb592150.exe
"C:\Users\Admin\AppData\Local\Temp\b4d79d938c59ac9dde8e6694cb592150.exe"
1⤵
PID:2520
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2520 -s 1148
  2⤵
  - Program crash
  PID:4468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2520 -ip 2520
1⤵
PID:208

memory/2520-135-0x0000000000050000-0x00000000000F6000-memory.dmp

Filesize
664KB

Download
memory/2520-136-0x0000000005250000-0x00000000057F4000-memory.dmp

Filesize
5.6MB

Download
memory/2520-137-0x0000000004B20000-0x0000000004BB2000-memory.dmp

Filesize
584KB

Download
memory/2520-138-0x0000000002550000-0x000000000255A000-memory.dmp

Filesize
40KB

Download