972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5

Analysis

max time kernel
171s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
21/11/2022, 14:39

Target

972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5.exe
Size

656KB
MD5

104ebb0a0267a6b2ca17134e643d62c8
SHA1

b4891bd811e6620673f3b8be8c591ee632f81695
SHA256

972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5
SHA512

0ab54f16f8227ca5437cd35c6e64e74d6d4c5ab0c33b559efff46fb310a02db85bf182bc79f24b3fff94ca8a3015cde32c367483524687ec290c545e1eed4674
SSDEEP

12288:xjuIUxHFMqPZE4MflAUBxt8WgKgCyjwNjT+X7WsVkNe:luISX/SlbBxt8nC8wFT0bVk

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4640	4560	WerFault.exe	82
2092	4560	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5.exe
"C:\Users\Admin\AppData\Local\Temp\972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5.exe"
1⤵
PID:4560
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4560 -s 544
  2⤵
  - Program crash
  PID:4640
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4560 -s 552
  2⤵
  - Program crash
  PID:2092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4560 -ip 4560
1⤵
PID:228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4560 -ip 4560
1⤵
PID:1912

memory/4560-132-0x000000000074D000-0x000000000077E000-memory.dmp

Filesize
196KB

Download
memory/4560-133-0x00000000007CE000-0x00000000007DC000-memory.dmp

Filesize
56KB

Download
memory/4560-134-0x0000000002629000-0x00000000026D7000-memory.dmp

Filesize
696KB

Download