fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64

Analysis

max time kernel
91s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 08:14

Target

fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64.exe
Size

686KB
MD5

a4f40e62d05012abb569e08294dd25a4
SHA1

732741e77e5cfcf8e4e0527fe16883c96a0ab5b7
SHA256

fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64
SHA512

cab51b2cd647dc94d754073761a9616afb3148aabe8ebf5539362bfd23e4fca4719eb27b0af611f953d54806f4fab750b44fb435ad7755976329e2a504a9d7b4
SSDEEP

12288:EN3Miy4IadS4ms5I6e66fEheKhgtML+ObqI9X:EN3bSaE4mvt//t+CIJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3252 4964 WerFault.exe fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64.exe

pid	pid_target	process	target process
3252	4964	WerFault.exe	fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64.exe

C:\Users\Admin\AppData\Local\Temp\fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64.exe
"C:\Users\Admin\AppData\Local\Temp\fb4d4b5c8e00f524228b26ff876f1683f181fe61326cf3eea767c390ea4bac64.exe"
1⤵
PID:4964

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4964 -s 780
2⤵
- Program crash
PID:3252

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 4964 -ip 4964
1⤵
PID:1968

memory/4964-135-0x0000000000F50000-0x0000000001002000-memory.dmp

Filesize
712KB

Download
memory/4964-136-0x00007FFCEED30000-0x00007FFCEF7F1000-memory.dmp

Filesize
10.8MB

Download
memory/4964-137-0x00007FFCEED30000-0x00007FFCEF7F1000-memory.dmp

Filesize
10.8MB

Download