5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544

Analysis

max time kernel
311s
max time network
354s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 08:03

Target

5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544.exe
Size

974KB
MD5

8f3c8e5c79d445ee07cfdb54976de65c
SHA1

4f382e2569a6edcd7f6bcd0d2fd30dbd84f93f37
SHA256

5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544
SHA512

cdf26f4be541738f475cff52e825974841bff298c5a636d53c1255a3b2822a435e73a5524d1b7e15aa80774fd904cc9c8d43536fb798e76c1fff6d6ddbc6caa6
SSDEEP

24576:D3pFrkRRoARi1wvw41hiDQyJbzdcK3cZP15NSw7HCIKz2YKZOId5R8:N/ARFbSZZN8NqxqY/q8

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4384 2968 WerFault.exe 5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544.exe

pid	pid_target	process	target process
4384	2968	WerFault.exe	5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544.exe

C:\Users\Admin\AppData\Local\Temp\5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544.exe
"C:\Users\Admin\AppData\Local\Temp\5f1d37b75551900fb6f85e02799bbf3fc7db56ff543f1c0d270ee9f1500ab544.exe"
1⤵
PID:2968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2968 -s 548
2⤵
- Program crash
PID:4384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2968 -ip 2968
1⤵
PID:4728

memory/2968-132-0x000000000083A000-0x0000000000846000-memory.dmp

Filesize
48KB

Download
memory/2968-133-0x00000000007CC000-0x00000000007F6000-memory.dmp

Filesize
168KB

Download
memory/2968-134-0x0000000002346000-0x00000000023DD000-memory.dmp

Filesize
604KB

Download