f11a10858d519fc3c2947637df38f532ad4d86e8b986da20ce6194e8c13b15c4

Analysis

max time kernel
165s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 18:02

Target

f11a10858d519fc3c2947637df38f532ad4d86e8b986da20ce6194e8c13b15c4.exe
Size

526KB
MD5

e1d68aef78ff9d53ab3f547b08825792
SHA1

c6de9559dd48590873a8bef6e11bf9a274eb4d44
SHA256

f11a10858d519fc3c2947637df38f532ad4d86e8b986da20ce6194e8c13b15c4
SHA512

8e50bdad5823d3a193df8625dbf5c7d12134325d8cd17d4de09cf8bc6b882860d4e20f537755e1ec717be9689f9ffa228afab58a76c874dedbf02ef6d5e17f1d
SSDEEP

12288:C9qECi5Y8g2KpkWU3RHzFGqQnbJ8Ks3z:C9qF2YZ+5lybJPs3z

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2620	4636	WerFault.exe	79
1592	4636	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\f11a10858d519fc3c2947637df38f532ad4d86e8b986da20ce6194e8c13b15c4.exe
"C:\Users\Admin\AppData\Local\Temp\f11a10858d519fc3c2947637df38f532ad4d86e8b986da20ce6194e8c13b15c4.exe"
1⤵
PID:4636
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 540
  2⤵
  - Program crash
  PID:2620
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 584
  2⤵
  - Program crash
  PID:1592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4636 -ip 4636
1⤵
PID:5040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4636 -ip 4636
1⤵
PID:3148

memory/4636-133-0x000000000074D000-0x0000000000756000-memory.dmp

Filesize
36KB

Download
memory/4636-132-0x000000000073F000-0x000000000074E000-memory.dmp

Filesize
60KB

Download
memory/4636-134-0x00000000006D4000-0x000000000073F000-memory.dmp

Filesize
428KB

Download