3a23bfb7585033cb42847fcbd2652accf014a4f201ee60e30971ea13c52bba31

Analysis

max time kernel
166s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 08:03

Target

2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
Size

279KB
MD5

ca7cde7b264002875917f8d9dffce121
SHA1

397412eba92b5c02de4a443c180ea82aa536c349
SHA256

52fd417b6f1a4a369a03bf5c449f380b3415d37fcc8e99d03c72bf0d07831986
SHA512

aaf023c3443e48d6717d9f0872c14e5863c63fe16cee9360e7dfaaefd10dc6d4444e479b410f6b9f58f7bc73165de5da7288f70ca23e4aed6ca161c3ba792598
SSDEEP

6144:NnosW1EBUJk5RUJIQ6CtCyuP5/M/2goLlUZCXF+z7l:Nmmm6fEO1LxCZ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2824 4968 WerFault.exe 2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe

pid	pid_target	process	target process
2824	4968	WerFault.exe	2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe

C:\Users\Admin\AppData\Local\Temp\2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
"C:\Users\Admin\AppData\Local\Temp\2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe"
1⤵
PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4968 -s 508
2⤵
- Program crash
PID:2824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4968 -ip 4968
1⤵
PID:2724