c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab

Analysis

max time kernel
157s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 17:33

Target

c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab.exe
Size

322KB
MD5

ec9c131b92b4c37bae39adb79b167e0e
SHA1

066430a555f2afe51ee39db3b7e2e03791105e40
SHA256

c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab
SHA512

920b6e44ac032c13e2bfd861440c93e04c6c67960191d89e385d6c596c916e148f0555422aeb49c3aa6b309f5191c8d2cfd792c3d50a0e01b5cc5a84257cc5a7
SSDEEP

6144:217/qs70CkEE/xzP6m/HDnP3Bw3gSfYlYaaRIDylnxtIYmDh7HgARCGuD:C7/qs7LUOmbPxww1vu1mrgdG

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3128 1980 WerFault.exe c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab.exe

pid	pid_target	process	target process
3128	1980	WerFault.exe	c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab.exe

C:\Users\Admin\AppData\Local\Temp\c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab.exe
"C:\Users\Admin\AppData\Local\Temp\c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab.exe"
1⤵
PID:1980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1980 -s 516
2⤵
- Program crash
PID:3128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1980 -ip 1980
1⤵
PID:3972

memory/1980-132-0x0000000001000000-0x00000000010A5000-memory.dmp

Filesize
660KB

Download