WerFaultSecure.exe

File Path: C:\WINDOWS\SysWOW64\WerFaultSecure.exe
Description: Windows Fault Reporting

Hashes

Type	Hash
MD5	`7A54653F0C2D8A8C0C222C881BC7519F`
SHA1	`160B503A738797F8C65CEDEC826D1559C2EBF43A`
SHA256	`1FE10F0D94E4B3EAE3ED7C86A691866530149E13EA66DC3170E889D0F98F4089`
SHA384	`D358C306FC7C52EB030F591B6002D08C93C8AA1CDF41CE8B924C6B67D090C98A221A6792259AF7E5A695A3ED7938BA80`
SHA512	`7448D5318C4E421581BC55D2177969BB49D68402A8A7D14D89886AA408C0EE29B9AC54554EAA26943D7936853F2F4B1FFE3B08C52AA195E5798635F83FC6F2D7`
SSDEEP	`3072:1kOspPUxE91+JvUFaQXYuUJi4oxiaJFJ+yC3pwRb6JPqB604HHy7hRCd39vM+g:1Hs++9MJvU4QouEi4ox0VJyB60OHyLCG`
IMP	`A073EE78D4AB7E67C6D1067F291AA5A9`
PESHA1	`55A921A5F004A307B4C0F8FC83A2688E0E900B36`
PE256	`6D82297DE4A1F0C35BF085E7EF9B8A8D8E5562D05E3A275D06E8C97DBEBF014C`

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WerFaultSecure.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.282 (WinBuild.160101.0800)
Product Version: 10.0.22000.282
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\Faultrep.dll	38
C:\windows\system32\WerFault.exe	38
C:\Windows\system32\WerFault.exe	36
C:\Windows\system32\WerFault.exe	36
C:\Windows\system32\WerFault.exe	44
C:\Windows\system32\WerFaultSecure.exe	60
C:\Windows\system32\WerFaultSecure.exe	58
C:\WINDOWS\system32\WerFaultSecure.exe	60
C:\Windows\system32\WerFaultSecure.exe	63
C:\Windows\system32\WerFaultSecure.exe	57
C:\Windows\system32\WerFaultSecure.exe	60
C:\Windows\system32\WerFaultSecure.exe	63
C:\Windows\system32\WerFaultSecure.exe	57
C:\WINDOWS\system32\WerFaultSecure.exe	60
C:\Windows\system32\WerFaultSecure.exe	58
C:\Windows\system32\wermgr.exe	40
C:\Windows\system32\wermgr.exe	40
C:\Windows\system32\wermgr.exe	61
C:\WINDOWS\system32\wermgr.exe	43
C:\WINDOWS\system32\wermgr.exe	40
C:\Windows\system32\wermgr.exe	36
C:\Windows\system32\wermgr.exe	57
C:\Windows\system32\wermgr.exe	46
C:\Windows\system32\wermgr.exe	57
C:\Windows\system32\wermgr.exe	47
C:\Windows\system32\wermgr.exe	54
C:\windows\system32\wermgr.exe	58
C:\Windows\system32\werui.dll	43
C:\Windows\SysWOW64\WerFault.exe	40
C:\windows\SysWOW64\WerFault.exe	32
C:\Windows\SysWOW64\WerFaultSecure.exe	60
C:\Windows\SysWOW64\WerFaultSecure.exe	58
C:\Windows\SysWOW64\WerFaultSecure.exe	58
C:\Windows\SysWOW64\WerFaultSecure.exe	57
C:\WINDOWS\SysWOW64\WerFaultSecure.exe	60
C:\Windows\SysWOW64\WerFaultSecure.exe	55
C:\Windows\SysWOW64\WerFaultSecure.exe	58
C:\Windows\SysWOW64\WerFaultSecure.exe	57
C:\Windows\SysWOW64\WerFaultSecure.exe	61
C:\Windows\SysWOW64\wermgr.exe	61
C:\windows\SysWOW64\wermgr.exe	60
C:\Windows\SysWOW64\wermgr.exe	40
C:\Windows\SysWOW64\wermgr.exe	38
C:\Windows\SysWOW64\wermgr.exe	33
C:\WINDOWS\SysWOW64\wermgr.exe	40
C:\Windows\SysWOW64\wermgr.exe	40
C:\Windows\SysWOW64\wermgr.exe	44
C:\WINDOWS\SysWOW64\wermgr.exe	41
C:\Windows\SysWOW64\wermgr.exe	40
C:\Windows\SysWOW64\wermgr.exe	41
C:\Windows\SysWOW64\wermgr.exe	41
C:\Windows\SysWOW64\werui.dll	40