WerFaultSecure.exe

  • File Path: C:\Windows\SysWOW64\WerFaultSecure.exe
  • Description: Windows Fault Reporting

Hashes

Type Hash
MD5 84558F5E30EB2D7E3EBD3CF00BAB9340
SHA1 F34DAD6A9F88C03BE2708EB12E26CB68502E350D
SHA256 9CA0FE016D2E7280B1E4D92662BCE6B5042C753BCBD86AD24756C3F843A7F06F
SHA384 C41797BB87AF645B68B036FC55DBB9BC8B75DC8A0361097572D627D92C5D867D5AF4E67C7DF4BE946E79EB06185DB053
SHA512 4E4041ADDAD341A7BC8138779345F6F99A45FE8E1EAFD5EBB62038F6E7621C45F3B4D521B7FCC5E0CB9A7A2359E7EA8689F7728B2EDAE13512D48C5856187D45
SSDEEP 3072:rLzUPrklN8uUMcHIQAHttdetanPFJ+yC3pwRb6JPqB604HHy7hRCd39vonKacp:r/Uz+N1UMwIQAHDdeYKVJyB60OHyLC7J
IMP AAE744DE1BB31F77049F9318A9550524
PESHA1 B2961A6157951DDB7F5716284058A2182A35B888
PE256 954E73792D0F0F93D73447C5FE9A012DA2FDA9DC1FF445305A939B87A7AA8F5E

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WerFaultSecure.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.867 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.867
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/9ca0fe016d2e7280b1e4d92662bce6b5042c753bcbd86ad24756c3f843a7f06f/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\Faultrep.dll 40
C:\windows\system32\WerFault.exe 38
C:\Windows\system32\WerFault.exe 32
C:\Windows\system32\WerFault.exe 35
C:\Windows\system32\WerFault.exe 41
C:\Windows\system32\WerFaultSecure.exe 63
C:\Windows\system32\WerFaultSecure.exe 61
C:\WINDOWS\system32\WerFaultSecure.exe 58
C:\Windows\system32\WerFaultSecure.exe 60
C:\Windows\system32\WerFaultSecure.exe 54
C:\Windows\system32\WerFaultSecure.exe 63
C:\Windows\system32\WerFaultSecure.exe 63
C:\Windows\system32\WerFaultSecure.exe 60
C:\WINDOWS\system32\WerFaultSecure.exe 58
C:\Windows\system32\WerFaultSecure.exe 60
C:\Windows\system32\wermgr.exe 40
C:\Windows\system32\wermgr.exe 44
C:\Windows\system32\wermgr.exe 58
C:\WINDOWS\system32\wermgr.exe 43
C:\WINDOWS\system32\wermgr.exe 49
C:\Windows\system32\wermgr.exe 38
C:\Windows\system32\wermgr.exe 54
C:\Windows\system32\wermgr.exe 47
C:\Windows\system32\wermgr.exe 55
C:\Windows\system32\wermgr.exe 46
C:\Windows\system32\wermgr.exe 52
C:\windows\system32\wermgr.exe 60
C:\Windows\system32\werui.dll 43
C:\Windows\SysWOW64\WerFault.exe 43
C:\windows\SysWOW64\WerFault.exe 25
C:\Windows\SysWOW64\WerFaultSecure.exe 58
C:\Windows\SysWOW64\WerFaultSecure.exe 60
C:\Windows\SysWOW64\WerFaultSecure.exe 55
C:\Windows\SysWOW64\WerFaultSecure.exe 57
C:\WINDOWS\SysWOW64\WerFaultSecure.exe 57
C:\WINDOWS\SysWOW64\WerFaultSecure.exe 55
C:\Windows\SysWOW64\WerFaultSecure.exe 57
C:\Windows\SysWOW64\WerFaultSecure.exe 86
C:\Windows\SysWOW64\WerFaultSecure.exe 61
C:\Windows\SysWOW64\wermgr.exe 57
C:\windows\SysWOW64\wermgr.exe 61
C:\Windows\SysWOW64\wermgr.exe 43
C:\Windows\SysWOW64\wermgr.exe 36
C:\Windows\SysWOW64\wermgr.exe 33
C:\WINDOWS\SysWOW64\wermgr.exe 41
C:\Windows\SysWOW64\wermgr.exe 36
C:\Windows\SysWOW64\wermgr.exe 44
C:\WINDOWS\SysWOW64\wermgr.exe 44
C:\Windows\SysWOW64\wermgr.exe 40
C:\Windows\SysWOW64\wermgr.exe 40
C:\Windows\SysWOW64\wermgr.exe 38
C:\Windows\SysWOW64\werui.dll 46

MIT License. Copyright (c) 2020-2021 Strontic.