efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 02:05

Target

efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c.exe
Size

352KB
MD5

1a9c7e67fee0bd287509a34382d91c59
SHA1

28944e2eb4a512764f20cc0d71f3ffaad9b7de31
SHA256

efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c
SHA512

955dd0cc51295719bce2d2daa40e697cd63e6678028d5da737cdf76b59fbedac4ecbf2d8c93882b9ab4ebc5061cb9baab8e080bb8c932fdaadb4da4e13abea9c
SSDEEP

6144:siG1HlQiadBxsp1vmCO02ugWmhPPaqTtznImkYcskO025PQ29ms:siGAi+BoKNugGKt87akh0PQ0m

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1180	4988	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c.exe
"C:\Users\Admin\AppData\Local\Temp\efe149a1a83b0ebdc31c7081dd4162f1ab5e1ee456f15c03844898cec66f212c.exe"
1⤵
PID:4988
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 588
  2⤵
  - Program crash
  PID:1180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4988 -ip 4988
1⤵
PID:4932