ff658f2385cd1ea6958f1abac9f1af4460ec66764f8373f43f7146f605dc1ae7

Analysis

max time kernel
152s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10-01-2024 09:01

Target

5025d4d18be3e307f280ce99792bd103.exe
Size

386KB
MD5

5025d4d18be3e307f280ce99792bd103
SHA1

1ebf08dae68919dcec39b056eee1d84051db0cdf
SHA256

ff658f2385cd1ea6958f1abac9f1af4460ec66764f8373f43f7146f605dc1ae7
SHA512

f1d0700bee5933cb6bd1a2744a9ae7f98c099a5ed63531cc210d5565045f45b74431e64f7e7b0a961385158c17977f5c00c975466ce7fea2b833047987957695
SSDEEP

6144:PCHDNhB0WCqB7l+04YmQ71poL5Cgg2GaSppsBUdZeppRSA6G7F3tNyu:qHZhW4BxXmQ71pkCg2aSoaISAxPL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4184 2828 WerFault.exe 5025d4d18be3e307f280ce99792bd103.exe

pid	pid_target	process	target process
4184	2828	WerFault.exe	5025d4d18be3e307f280ce99792bd103.exe

C:\Users\Admin\AppData\Local\Temp\5025d4d18be3e307f280ce99792bd103.exe
"C:\Users\Admin\AppData\Local\Temp\5025d4d18be3e307f280ce99792bd103.exe"
1⤵
PID:2828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2828 -s 384
2⤵
- Program crash
PID:4184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 2828 -ip 2828
1⤵
PID:3004