06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef

Analysis

max time kernel
185s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 01:08

Target

06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef.exe
Size

239KB
MD5

181a2730c16beaf3e9ecf5aa8e41f37e
SHA1

1209e0b2970097a2ac60cfca5308086ccc636f19
SHA256

06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef
SHA512

6b7a1d9aa18233d489fd5337aedcca66eff0225908288e3a6f9211fc60466e59f6e4f34835ed22d4344a737a8437fa93d4624c3cf86141d3ca9b2ed5ffd15b1e
SSDEEP

3072:crahgHEjKy9SSxbw0jEoQpqYT05zUoPhRNcagou9e1v3hGK2Xz:u89SowsEh9TGNZRNtgJ9e1EDz

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

112 3304 WerFault.exe 06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef.exe

pid	pid_target	process	target process
112	3304	WerFault.exe	06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef.exe

C:\Users\Admin\AppData\Local\Temp\06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef.exe
"C:\Users\Admin\AppData\Local\Temp\06a17cddf12eb504412eb41d69d60ded1f34211286ca632b20f46bab64bf99ef.exe"
1⤵
PID:3304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3304 -s 344
2⤵
- Program crash
PID:112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3304 -ip 3304
1⤵
PID:2644

memory/3304-132-0x0000000000400000-0x0000000000440000-memory.dmp

Filesize
256KB

Download
memory/3304-133-0x0000000000400000-0x0000000000440000-memory.dmp

Filesize
256KB

Download