5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272

Analysis

max time kernel
249s
max time network
317s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 14:14

Target

5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272.exe
Size

167KB
MD5

244341f5f57cb934e0ca2244e2ad4b41
SHA1

178b9c7d37de55eed7fd8953ab8f3db2416a718f
SHA256

5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272
SHA512

43415887f1a2bf91cac2786d55d32bc2c2208422ec2574ccab17b24ba7723a363a019498f19792a33ffc4f693a01212bf2ec2ae6af7dda9139e66e40e25b2a8a
SSDEEP

3072:TYb0jN75f0v3FODIZQi0ke/s5lWwKX/Lcw3ITKgluQopA6ZBQLHX:TYb0jN1f0v3F6IZQi0ke/sbSPLcw3IT7

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2304 4272 WerFault.exe 5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272.exe

pid	pid_target	process	target process
2304	4272	WerFault.exe	5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272.exe

C:\Users\Admin\AppData\Local\Temp\5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272.exe
"C:\Users\Admin\AppData\Local\Temp\5a2f78d95d699e529fa3d12f4823ebb1734cc1c0483de3bb7132a5ffbbf32272.exe"
1⤵
PID:4272
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4272 -s 280
  2⤵
  - Program crash
  PID:2304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4272 -ip 4272
1⤵
PID:1648

memory/4272-132-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/4272-133-0x0000000000400000-0x000000000043D000-memory.dmp

Filesize
244KB

Download
memory/4272-134-0x0000000000550000-0x000000000058D000-memory.dmp

Filesize
244KB

Download