1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2

Analysis

max time kernel
180s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:13

Target

1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2.exe
Size

492KB
MD5

01809d1b522e3c6e36d8123277fc9b50
SHA1

2b52deff76cd727c7725b9c73af41ec52bf4c4c4
SHA256

1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2
SHA512

8f29eca751849ea5b80b7648c2173496580003150d06cd635490f78c6797401f0be44a8ed6d3c1d60e9d5534466e0b0b0933ff6e33027ecefc2a29aa63cf7cb6
SSDEEP

12288:tY5tmk925ydFQQZ4KumF+C2VW+HNAeE5:Q/2gdFQQZtXF+C2VWaN+

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1164 608 WerFault.exe 1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2.exe

pid	pid_target	process	target process
1164	608	WerFault.exe	1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2.exe

C:\Users\Admin\AppData\Local\Temp\1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2.exe
"C:\Users\Admin\AppData\Local\Temp\1296093de074002fa8ee115432439182f4e8338008aeb02fd5cbb29da0d2cdd2.exe"
1⤵
PID:608

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 608 -s 492
2⤵
- Program crash
PID:1164

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 608 -ip 608
1⤵
PID:4204

memory/608-132-0x0000000000410000-0x00000000004D8000-memory.dmp

Filesize
800KB

Download