254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64

Analysis

max time kernel
178s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 17:18

Target

254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64.exe
Size

235KB
MD5

450bca149b5134bf208025d2cc7507c0
SHA1

32b6e1d43b5d22c555b07717059dfca9c557106a
SHA256

254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64
SHA512

ea9245591592400837327c44e7013b6cc7a57bec3b9f689f4b453412053199f790b5ceffdc64a3b86162ed38060361adb93b68449f062952273e66d6633cf9c5
SSDEEP

3072:QSX0ITKZTQWtVjQqAtvEfivaDBDbbA23IX628sFm9kbSWmCIC9YBZ1Esz:rTKJ91/ATyBbbAvXn8sFmGbSWmFCYOs

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1752 3780 WerFault.exe 254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64.exe

pid	pid_target	process	target process
1752	3780	WerFault.exe	254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64.exe

C:\Users\Admin\AppData\Local\Temp\254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64.exe
"C:\Users\Admin\AppData\Local\Temp\254cd24c9e06af81e1ec4376359b08d63d0e6ca8e6050038574c882325cb2b64.exe"
1⤵
PID:3780

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3780 -s 416
2⤵
- Program crash
PID:1752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 3780 -ip 3780
1⤵
PID:4808

memory/3780-132-0x0000000001000000-0x000000000115F000-memory.dmp

Filesize
1.4MB

Download
memory/3780-133-0x0000000001000000-0x000000000115F000-memory.dmp

Filesize
1.4MB

Download