a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:55

Target

a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492.exe
Size

412KB
MD5

0aa9633a924967153623f1b209f45953
SHA1

305f100f9139f204df8771ee4d2374e76d038f91
SHA256

a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492
SHA512

a50bba4cd83d0e17b61618b54d1404631f13680edcd6624f3d3026fb816db2ffe589b6da8124751c9b2cf3f3622c99b5cacd933c167c9755ab5e00c5a61c54d7
SSDEEP

12288:rxEEhphg6Srp+2HZ/c8LHhqdxQkOLT4u6pqJA:rxRhphg6J25/GdxQlkqJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4376 4988 WerFault.exe a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492.exe

pid	pid_target	process	target process
4376	4988	WerFault.exe	a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492.exe

C:\Users\Admin\AppData\Local\Temp\a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492.exe
"C:\Users\Admin\AppData\Local\Temp\a514ff7dee704397d3a40403ae72a1b4d0438125c27cb54ea40dfc6c17008492.exe"
1⤵
PID:4988

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 548
2⤵
- Program crash
PID:4376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4988 -ip 4988
1⤵
PID:4952

memory/4988-132-0x0000000002310000-0x0000000002316000-memory.dmp

Filesize
24KB

Download
memory/4988-133-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download