c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2

Analysis

max time kernel
188s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 06:10

Target

c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe
Size

259KB
MD5

c0867486c67f9e2318b2b66496107d1a
SHA1

eed6ee3ebb02f771c43d29a1a09427be8794bc15
SHA256

c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2
SHA512

5b877134b745a9a74bc516d4159ceafa350af24fab714d43eb3cadfc5f8e9ad283b3c86e1ceb29b679c338fc709dfb6f1b3976b9bf8d45557e9f40606d756900
SSDEEP

3072:InnAQVG/LytaKItS/fiLKS+f5Aq7iIr27IsSJs/pVJzIxFY4PRUh2/YY3cn/QvS1:EOTeHI8HiL7+f5T4IlYxwFr5tE/T/

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
348	1536	WerFault.exe	70
3476	1536	WerFault.exe	70

C:\Users\Admin\AppData\Local\Temp\c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe
"C:\Users\Admin\AppData\Local\Temp\c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe"
1⤵
PID:1536
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 480
  2⤵
  - Program crash
  PID:348
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 484
  2⤵
  - Program crash
  PID:3476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1536 -ip 1536
1⤵
PID:2708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1536 -ip 1536
1⤵
PID:1868

memory/1536-132-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/1536-133-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download