560afca3e6fd97329f25ac60d46facfaa833e62955f67cea5061b727f78c6450

Analysis

max time kernel
202s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 05:06

Target

560afca3e6fd97329f25ac60d46facfaa833e62955f67cea5061b727f78c6450.exe
Size

89KB
MD5

73bd323d26e78e4a77e7ea7ebcb8ad76
SHA1

10d4d6a07bfc6a0843ff57ea6c6287ea4faed66e
SHA256

560afca3e6fd97329f25ac60d46facfaa833e62955f67cea5061b727f78c6450
SHA512

2f76fc1fec7adec38f2a85a3396c2267e1e90f45f3568f098dd99ac301a6ccfddd06074d594c3f57f9c140da346636ba6efd5426da331828fbaab41538dbb329
SSDEEP

1536:uHshaIQ/AnNxAiiJvffxZgAdzZcgIHrL:u6wAN+i+JZgAlgH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1912	4832	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\560afca3e6fd97329f25ac60d46facfaa833e62955f67cea5061b727f78c6450.exe
"C:\Users\Admin\AppData\Local\Temp\560afca3e6fd97329f25ac60d46facfaa833e62955f67cea5061b727f78c6450.exe"
1⤵
PID:4832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 464
  2⤵
  - Program crash
  PID:1912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 4832 -ip 4832
1⤵
PID:4824

memory/4832-132-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/4832-133-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download