fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 07:40

Target

fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348.exe
Size

665KB
MD5

9bca65ed2f75f83a094f6e5b2cf6c2b8
SHA1

0cc2faed9c017cc75f76bb18a3ca07f78e183d0b
SHA256

fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348
SHA512

8a30f607ab9b2f9859c01083a5a1930cb5499fad9f0641a5dc654712674112bd11213b5c327c17def665af06dfc7d97367916b2ca8f5e3c1b803b70adef8b58c
SSDEEP

12288:bI4Cld3+qJS3YdaHK6pY3hvolspYZj/ZjOO4:bI5uqJSI8q130sYZ7ZjOO4

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4228 4204 WerFault.exe fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348.exe

pid	pid_target	process	target process
4228	4204	WerFault.exe	fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348.exe

C:\Users\Admin\AppData\Local\Temp\fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348.exe
"C:\Users\Admin\AppData\Local\Temp\fba348029727ad389484d220941eefd8ced7783b77326e27d407d2c13ac39348.exe"
1⤵
PID:4204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4204 -s 1140
2⤵
- Program crash
PID:4228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4204 -ip 4204
1⤵
PID:4544

memory/4204-132-0x0000000000070000-0x000000000011C000-memory.dmp

Filesize
688KB

Download
memory/4204-133-0x0000000004FE0000-0x0000000005584000-memory.dmp

Filesize
5.6MB

Download
memory/4204-134-0x0000000004AD0000-0x0000000004B62000-memory.dmp

Filesize
584KB

Download
memory/4204-135-0x0000000004C90000-0x0000000004C9A000-memory.dmp

Filesize
40KB

Download