20a98e86ebeeacb4d79a4f3fe6fead40559b83bf5388123099365739fdd09e3b

Analysis

max time kernel
138s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11-01-2024 07:17

Target

52e299444efeafc5b6dab83f45a2aaf9.exe
Size

148KB
MD5

52e299444efeafc5b6dab83f45a2aaf9
SHA1

1ea251945e0e8f318942a5e59b91ce9a106f8810
SHA256

20a98e86ebeeacb4d79a4f3fe6fead40559b83bf5388123099365739fdd09e3b
SHA512

a9a0b85e24e26ac2de55096bc2b24ce9df518bd2581483d0b53058c96840d6d5281facb08dacfffbd7cd44acb8894e4c292f49c3ed04ae77f0eb11debcff1084
SSDEEP

3072:5aGovdrh2RoMVmO7IzohgxR9o583dHfukXt/Ypug3Oz4hlsVFq:5aGoGRoM0OszzR9x5uRp7ezm

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2780 1904 WerFault.exe 52e299444efeafc5b6dab83f45a2aaf9.exe

pid	pid_target	process	target process
2780	1904	WerFault.exe	52e299444efeafc5b6dab83f45a2aaf9.exe

C:\Users\Admin\AppData\Local\Temp\52e299444efeafc5b6dab83f45a2aaf9.exe
"C:\Users\Admin\AppData\Local\Temp\52e299444efeafc5b6dab83f45a2aaf9.exe"
1⤵
PID:1904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1904 -s 480
2⤵
- Program crash
PID:2780

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1904 -ip 1904
1⤵
PID:4604