6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc

Analysis

max time kernel
102s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 19:37

Target

6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc.exe
Size

248KB
MD5

e00648f7507cb0beabc250e807d3a03d
SHA1

416491ab75e6e891053a924dbbaa0c4e91372eb8
SHA256

6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc
SHA512

3c3a934e6eefa0d61c80b32a6b7687372123a041a2d2f0bae2fce5bf575aee6861f902aae149b76a65c22218142db870e09e94caf13a226cc6c64c08323780cd
SSDEEP

6144:RMwIwki5wXZ7PC63Frbvf9IaSWLkySPIq6YKbNmab:RMW5e1rbv5oyST6XbNm

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1112	4956	WerFault.exe	79
4548	4956	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc.exe
"C:\Users\Admin\AppData\Local\Temp\6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc.exe"
1⤵
PID:4956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 480
  2⤵
  - Program crash
  PID:1112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 500
  2⤵
  - Program crash
  PID:4548

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4956 -ip 4956
1⤵
PID:4820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 4956 -ip 4956
1⤵
PID:4460

memory/4956-132-0x0000000000671000-0x0000000000676000-memory.dmp

Filesize
20KB

Download
memory/4956-133-0x0000000000683000-0x0000000000688000-memory.dmp

Filesize
20KB

Download
memory/4956-134-0x0000000000689000-0x00000000006A1000-memory.dmp

Filesize
96KB

Download