98487fa5f797b6ed8bdb268e5ab80b28aa39e481092c8e821da3e1a1e76b5c4d

Analysis

max time kernel
154s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 17:14

Target

98487fa5f797b6ed8bdb268e5ab80b28aa39e481092c8e821da3e1a1e76b5c4d.exe
Size

426KB
MD5

d082741af7418eb9063dc8086f51fee4
SHA1

eadae5480f7b553815d0b4411a14a0a92ed655fd
SHA256

98487fa5f797b6ed8bdb268e5ab80b28aa39e481092c8e821da3e1a1e76b5c4d
SHA512

88b8567d49b8792909ff5b159c460389b109e84c4f3f7c92d12cd4f638c054a7592c822ba66eba44eca65147fec2536f734112dd51860c5123837a491c1e9244
SSDEEP

6144:aptF7Qm2K0vDq3J/QmmCKVBzakE7G/XAxb5vSr31RYDrLhCr0Q:w7WK0vDKImmJVBz+1xbh831RYDr6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
632	1684	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\98487fa5f797b6ed8bdb268e5ab80b28aa39e481092c8e821da3e1a1e76b5c4d.exe
"C:\Users\Admin\AppData\Local\Temp\98487fa5f797b6ed8bdb268e5ab80b28aa39e481092c8e821da3e1a1e76b5c4d.exe"
1⤵
PID:1684
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 540
  2⤵
  - Program crash
  PID:632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1684 -ip 1684
1⤵
PID:1856

memory/1684-132-0x0000000000400000-0x0000000000470000-memory.dmp

Filesize
448KB

Download
memory/1684-133-0x0000000000400000-0x0000000000470000-memory.dmp

Filesize
448KB

Download
memory/1684-134-0x0000000000400000-0x0000000000470000-memory.dmp

Filesize
448KB

Download