80f032f987606815368995bfe9e1baed149810b9cb9d397598f9540de7074717

Analysis

max time kernel
122s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 22:21

Target

80f032f987606815368995bfe9e1baed149810b9cb9d397598f9540de7074717.exe
Size

284KB
MD5

55bfc1dca9bea87893584ab66b71c243
SHA1

c76be8726baab0ad3535e19368466949a95cce91
SHA256

80f032f987606815368995bfe9e1baed149810b9cb9d397598f9540de7074717
SHA512

2838d15a95ceeddb5d3cc9cc659fcf533c634abb12ba25c586f551c819aab05f540ecf9eaa2599f90169c0dd0aa3529c429b6ba4336ef8d0860bb2eae7e126cb
SSDEEP

6144:FwRlHNfsoixv95e1RvE9JHJDm1ssAg9Iu9ge5UsV:k9NfuxV5wRvQV+sw9Iu9geCsV

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1200	4968	WerFault.exe	80
1148	4968	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\80f032f987606815368995bfe9e1baed149810b9cb9d397598f9540de7074717.exe
"C:\Users\Admin\AppData\Local\Temp\80f032f987606815368995bfe9e1baed149810b9cb9d397598f9540de7074717.exe"
1⤵
PID:4968
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4968 -s 524
  2⤵
  - Program crash
  PID:1200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4968 -s 524
  2⤵
  - Program crash
  PID:1148

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4968 -ip 4968
1⤵
PID:5036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 4968 -ip 4968
1⤵
PID:832

memory/4968-132-0x00000000007CF000-0x00000000007D4000-memory.dmp

Filesize
20KB

Download
memory/4968-133-0x00000000007CA000-0x00000000007D0000-memory.dmp

Filesize
24KB

Download
memory/4968-134-0x00000000007B2000-0x00000000007CA000-memory.dmp

Filesize
96KB

Download