d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679

Analysis

max time kernel
188s
max time network
192s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 01:14

Target

d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679.exe
Size

232KB
MD5

00e0603ea321546dd646b28e2e1639b4
SHA1

369ae6766c61f116d4deb1ccd26b27f6ebba352c
SHA256

d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679
SHA512

4ce512a0ea2126550e65f39e36951f6f1c3e2a98c8092d521ec774ef0355e3e2e756c653fc86d2e58e780a3c4a186d9f4372a031aa9f90d3687a674bc3fbef7d
SSDEEP

3072:zDPhT7lKb2fldRMtyyYyzwCv2gs3iOSYBnr2:zDR7lKbAlMg/yzNGiO/Br2

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3908 4168 WerFault.exe d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679.exe

pid	pid_target	process	target process
3908	4168	WerFault.exe	d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679.exe

C:\Users\Admin\AppData\Local\Temp\d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679.exe
"C:\Users\Admin\AppData\Local\Temp\d625e60dadd7018796a6ab2de0e8ab89d1401e43da4979245c8954ea4e5ad679.exe"
1⤵
PID:4168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4168 -s 468
2⤵
- Program crash
PID:3908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4168 -ip 4168
1⤵
PID:4156

memory/4168-132-0x0000000001000000-0x0000000001040000-memory.dmp

Filesize
256KB

Download
memory/4168-133-0x0000000001000000-0x0000000001040000-memory.dmp

Filesize
256KB

Download