d0fa6db9b49712229d63111ace4d1980c61d0409d91af23945252a49d34b98b9

Analysis

max time kernel
185s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 03:27

Target

d0fa6db9b49712229d63111ace4d1980c61d0409d91af23945252a49d34b98b9.exe
Size

782KB
MD5

3688f8d0a2a06a2766e5c1fa3af0fe3a
SHA1

bb274a4df2d6ca87962e4adeaabb1a2a8fc7019f
SHA256

d0fa6db9b49712229d63111ace4d1980c61d0409d91af23945252a49d34b98b9
SHA512

b1a923dbc3be430ed6d30a6c8cc4c17b67b09ae0c8668f0ba73e3a02d1e6ebccede32ced1aea4cd48e910e812f898a45539d934598c7af4a6c239670c1199d7b
SSDEEP

12288:q/x6eupBHuhReiETAFpen/8dWHmVPlZfvBnRTg9FSZg44CetgrwGTFCr:qZ6eGZoScFp+aO0lZ3oFJ7nG

Score

3^/10

Program crash 4 IoCs

pid	pid_target	Process	procid_target
1888	552	WerFault.exe	77
2472	552	WerFault.exe	77
2720	552	WerFault.exe	77
884	552	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\d0fa6db9b49712229d63111ace4d1980c61d0409d91af23945252a49d34b98b9.exe
"C:\Users\Admin\AppData\Local\Temp\d0fa6db9b49712229d63111ace4d1980c61d0409d91af23945252a49d34b98b9.exe"
1⤵
PID:552
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 552 -s 448
  2⤵
  - Program crash
  PID:1888
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 552 -s 668
  2⤵
  - Program crash
  PID:2472
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 552 -s 672
  2⤵
  - Program crash
  PID:2720
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 552 -s 668
  2⤵
  - Program crash
  PID:884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 552 -ip 552
1⤵
PID:2280

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 552 -ip 552
1⤵
PID:4848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 552 -ip 552
1⤵
PID:3588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 552 -ip 552
1⤵
PID:4704