505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313

Analysis

max time kernel
197s
max time network
217s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 23:05

Target

505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313.exe
Size

824KB
MD5

b32011756d89b247f6a641c679fcacd8
SHA1

dbfb48feb5bf9ed54df8d2101e68c64bafe558dd
SHA256

505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313
SHA512

fbcb10cd8d910a3b5311aed5556c27acefcb033115afdca718fd7bf7e23cea26bfec69db778b8f4dbe5e444e8b8e3fdd4ab740605133552d716388c30f8c12df
SSDEEP

12288:g4K5jm4Xq+Ry71px3y6k8AUK3fHJSJnjGHKR/zzfQ1WdsKxhtav/yd:lumqzRN6k83KxgKHIvQ81H4/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4744 4832 WerFault.exe 505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313.exe

pid	pid_target	process	target process
4744	4832	WerFault.exe	505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313.exe

C:\Users\Admin\AppData\Local\Temp\505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313.exe
"C:\Users\Admin\AppData\Local\Temp\505e93aad9e036ff06389c4da0e5529241ac9bfdda9b2f0343432995af53d313.exe"
1⤵
PID:4832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 496
2⤵
- Program crash
PID:4744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4832 -ip 4832
1⤵
PID:3968

memory/4832-132-0x0000000002210000-0x0000000002220000-memory.dmp

Filesize
64KB

Download
memory/4832-133-0x0000000000400000-0x00000000004D0000-memory.dmp

Filesize
832KB

Download