5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd

Analysis

max time kernel
276s
max time network
342s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 14:14

Target

5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd.exe
Size

384KB
MD5

a880d8cb3b97f7ecdfaa7b9a781c3b6b
SHA1

9176eab753aea549a85c7ed666b575d0d2c2b464
SHA256

5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd
SHA512

10843244872884cbfaf7f8807f9cc67db485a54a6eb7c4066b32dfcba0e0a779f625df23ea1b42498956ab869c22370fd69639e70bbf639f235a6a121accfc75
SSDEEP

6144:eAK/L97QF7VEUX0u/DZ0NyL+ZQnSO0xDihT2ZOET0xopnAYAd35HXkdu6cB2naU:FmL9O7GQGyL+Zs0xDDuxoVtUNkdrcB2j

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1292 5064 WerFault.exe 5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd.exe

pid	pid_target	process	target process
1292	5064	WerFault.exe	5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd.exe

C:\Users\Admin\AppData\Local\Temp\5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd.exe
"C:\Users\Admin\AppData\Local\Temp\5afa6179ef8298ead0b4fdb421f923f569c51ca40fd9f1e363f7f5c1666ab7dd.exe"
1⤵
PID:5064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5064 -s 712
  2⤵
  - Program crash
  PID:1292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5064 -ip 5064
1⤵
PID:3984

memory/5064-132-0x00000000007B0000-0x00000000007B6000-memory.dmp

Filesize
24KB

Download
memory/5064-133-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download