ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583

Analysis

max time kernel
90s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:46

Target

ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583.exe
Size

543KB
MD5

1dd2d95ae050cb6ceae0bfb0b2960514
SHA1

f1df64cc4d4418b3b7485a378eb683607554fa35
SHA256

ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583
SHA512

741c8be775ba886c674e7097c54825b5cfdfe14c6bbef20243f2ccb1230cc29f36364282a32f8b07f01d59bbca276b9ebdc4cbd60a824eae5efe3081d9be22fd
SSDEEP

12288:w6aYTZpRu1wyUXbrFQfAgW9fMhx6khpm21/cUp:vZ21QXbrFQfhDmSp

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
2060	2836	WerFault.exe	ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583.exe
1476	2836	WerFault.exe	ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583.exe

C:\Users\Admin\AppData\Local\Temp\ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583.exe
"C:\Users\Admin\AppData\Local\Temp\ff83d027a9916b990f8e4da64a0a15b375e4e3c404f98cebd5f721ae354e2583.exe"
1⤵
PID:2836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2836 -s 192
2⤵
- Program crash
PID:2060

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2836 -s 228
2⤵
- Program crash
PID:1476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2836 -ip 2836
1⤵
PID:4792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2836 -ip 2836
1⤵
PID:4260

memory/2836-132-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2836-133-0x00000000006B0000-0x00000000016B0000-memory.dmp

Filesize
16.0MB

Download