ead1a23a11ca322e3739870304319d216ee5e7da38970901bc32d458d8f31108

Analysis

max time kernel
193s
max time network
238s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 14:40

Target

telekom_deutschland_dezember_2014_de_0001_3029400_92_928_02020_0_7_293489_0038.exe
Size

148KB
MD5

eef4f704782a0b884d93469cf6abe798
SHA1

151fdfe786cdba7b3604ef29f2c8fffdbd3e53b2
SHA256

cb8585df799d0bd09d42d4c5554cc94964d3a07d2c4be119a725f0e5c6d56d67
SHA512

37647538711e315350cf326baf9f5e40d51b0452d54c69703fa24e3caf8877e871e6f76e14edb5623a103b0c69ae7421be1d0685d9de1c124ff3fa7d716fb09f
SSDEEP

3072:EIfzPBDPJpHT1BL5T87ksg7VWIpSKfPGa2JtrQeYCr5:LzPpPnT3L5I71W8IXf+aKQeYCr5

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4260	1008	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\telekom_deutschland_dezember_2014_de_0001_3029400_92_928_02020_0_7_293489_0038.exe
"C:\Users\Admin\AppData\Local\Temp\telekom_deutschland_dezember_2014_de_0001_3029400_92_928_02020_0_7_293489_0038.exe"
1⤵
PID:1008
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1008 -s 408
  2⤵
  - Program crash
  PID:4260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1008 -ip 1008
1⤵
PID:3496