d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa

Analysis

max time kernel
162s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 08:26

Target

d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa.exe
Size

168KB
MD5

ddca4d55e0b4c7e729f2a27721f6f957
SHA1

7e48c9dc3e44db4e7a72eb01f3f57c8866c7946c
SHA256

d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa
SHA512

ec1bda515bd0ab60f86d0976dec365b2cc3def12c4a9d381851213ad139c807addc883851a1bb548943f5b35dc7222ea7ecbdbbe30338a053bc5c8e507b2a6ab
SSDEEP

3072:FgW1Bd+9OdyRRGqUXyKKihqwk+mN4vHBbkjuWnHqNI8XKvu+TJ:FDPd+95e9K5d+maHpkjucHqHqJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4932 668 WerFault.exe d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa.exe

pid	pid_target	process	target process
4932	668	WerFault.exe	d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa.exe

C:\Users\Admin\AppData\Local\Temp\d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa.exe
"C:\Users\Admin\AppData\Local\Temp\d119babfd04596cdae407a1642d4713d566e601c6d2d096215fed02a8d14a7aa.exe"
1⤵
PID:668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 668 -s 496
2⤵
- Program crash
PID:4932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 668 -ip 668
1⤵
PID:4944

memory/668-132-0x00000000021B0000-0x00000000021C6000-memory.dmp

Filesize
88KB

Download