1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f

Analysis

max time kernel
151s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 21:22

Target

1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe
Size

88KB
MD5

6adea671b8b2d61700a1aa5e1c5f565e
SHA1

e2654f84667b636dd3ce49dedd0c6c2b0e7aa23a
SHA256

1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f
SHA512

beeface7f40d91dfd80561551bd448aaaa497f9e99178b2e8ef8999f2c4ca9389131eb59459704f376b8afced11b64601fb50048343d126ec1603385691d13c0
SSDEEP

1536:W6PZmSDhdF4E4oeBtK96xfwcRkPf1UESYUstf0QUid:vPZmSDFOJfwCk31UESNstf0QUid

Score

7^/10

Loads dropped DLL 2 IoCs

Processes:

1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe

pid	process
4980	1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe
4980	1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1812 4980 WerFault.exe 1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe

pid	pid_target	process	target process
1812	4980	WerFault.exe	1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe

C:\Users\Admin\AppData\Local\Temp\1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe
"C:\Users\Admin\AppData\Local\Temp\1e29045dd600766fbeb1bb6322a34c228bb9ecacff897fa821107124abab618f.exe"
1⤵
- Loads dropped DLL
PID:4980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 416
2⤵
- Program crash
PID:1812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4980 -ip 4980
1⤵
PID:4628

C:\Users\Admin\AppData\Local\Temp\yuiC8F2.tmp
Filesize
172KB

MD5
654fcbfff0602b11879071dc53deed48

SHA1
37d4c4e8940766cf4586c63dcb4472ec38aa6b50

SHA256
93991b5528b5b6aeac118a19c49d38fc4d2e3205565b6be6f7bc96a17b812de6

SHA512
52d6d2c9e0a0ab0e1023ea2713bab589002b9a001baaee8850c955254c0188258d281f71f92434d1c6ed3bbd195767467f641e92ba9617acb4cd425fe8ad6bd1

Download Submit
C:\Users\Admin\AppData\Local\Temp\yuiC8F2.tmp
Filesize
172KB

MD5
654fcbfff0602b11879071dc53deed48

SHA1
37d4c4e8940766cf4586c63dcb4472ec38aa6b50

SHA256
93991b5528b5b6aeac118a19c49d38fc4d2e3205565b6be6f7bc96a17b812de6

SHA512
52d6d2c9e0a0ab0e1023ea2713bab589002b9a001baaee8850c955254c0188258d281f71f92434d1c6ed3bbd195767467f641e92ba9617acb4cd425fe8ad6bd1

Download Submit
memory/4980-134-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/4980-135-0x0000000000A50000-0x0000000000AC3000-memory.dmp

Filesize
460KB

Download
memory/4980-136-0x0000000000A50000-0x0000000000AC3000-memory.dmp

Filesize
460KB

Download