645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 07:47

Target

645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf.exe
Size

360KB
MD5

c0b7380c4142584d07c9dfda788a0b7c
SHA1

2dc66f1d7b67c5da40e4f2818542523afb482fba
SHA256

645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf
SHA512

566df54db4a985a1edb6e8c943bd4c817b0e488cfd37a8db0a902c9dc4331bcb43865a99825684778debf92a5cede1984a94f253c33aa09b6d90fd2d9b07a0d6
SSDEEP

6144:/da7n/zd2ZHcsXtxbySUli4QrAkXFAV45Xi1XIq7PbZ9wA:/dw/w1c6YSt4QrA2NiXv7wA

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1332 1404 WerFault.exe 645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf.exe

pid	pid_target	process	target process
1332	1404	WerFault.exe	645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf.exe

C:\Users\Admin\AppData\Local\Temp\645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf.exe
"C:\Users\Admin\AppData\Local\Temp\645b82ae9a8323b7c3856c008d3e54bae563d73d78b2a6331386f5b66115cfcf.exe"
1⤵
PID:1404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1404 -s 696
2⤵
- Program crash
PID:1332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1404 -ip 1404
1⤵
PID:3112

memory/1404-132-0x0000000000E60000-0x0000000000E64000-memory.dmp

Filesize
16KB

Download
memory/1404-133-0x0000000001000000-0x00000000010A7000-memory.dmp

Filesize
668KB

Download