WerFaultSecure.exe

File Path: C:\Windows\SysWOW64\WerFaultSecure.exe
Description: Windows Fault Reporting

Hashes

Type	Hash
MD5	`84558F5E30EB2D7E3EBD3CF00BAB9340`
SHA1	`F34DAD6A9F88C03BE2708EB12E26CB68502E350D`
SHA256	`9CA0FE016D2E7280B1E4D92662BCE6B5042C753BCBD86AD24756C3F843A7F06F`
SHA384	`C41797BB87AF645B68B036FC55DBB9BC8B75DC8A0361097572D627D92C5D867D5AF4E67C7DF4BE946E79EB06185DB053`
SHA512	`4E4041ADDAD341A7BC8138779345F6F99A45FE8E1EAFD5EBB62038F6E7621C45F3B4D521B7FCC5E0CB9A7A2359E7EA8689F7728B2EDAE13512D48C5856187D45`
SSDEEP	`3072:rLzUPrklN8uUMcHIQAHttdetanPFJ+yC3pwRb6JPqB604HHy7hRCd39vonKacp:r/Uz+N1UMwIQAHDdeYKVJyB60OHyLC7J`
IMP	`AAE744DE1BB31F77049F9318A9550524`
PESHA1	`B2961A6157951DDB7F5716284058A2182A35B888`
PE256	`954E73792D0F0F93D73447C5FE9A012DA2FDA9DC1FF445305A939B87A7AA8F5E`

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WerFaultSecure.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.867 (WinBuild.160101.0800)
Product Version: 10.0.19041.867
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/71
VirusTotal Link: https://www.virustotal.com/gui/file/9ca0fe016d2e7280b1e4d92662bce6b5042c753bcbd86ad24756c3f843a7f06f/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\Faultrep.dll	40
C:\windows\system32\WerFault.exe	38
C:\Windows\system32\WerFault.exe	32
C:\Windows\system32\WerFault.exe	35
C:\Windows\system32\WerFault.exe	41
C:\Windows\system32\WerFaultSecure.exe	63
C:\Windows\system32\WerFaultSecure.exe	61
C:\WINDOWS\system32\WerFaultSecure.exe	58
C:\Windows\system32\WerFaultSecure.exe	60
C:\Windows\system32\WerFaultSecure.exe	54
C:\Windows\system32\WerFaultSecure.exe	63
C:\Windows\system32\WerFaultSecure.exe	63
C:\Windows\system32\WerFaultSecure.exe	60
C:\WINDOWS\system32\WerFaultSecure.exe	58
C:\Windows\system32\WerFaultSecure.exe	60
C:\Windows\system32\wermgr.exe	40
C:\Windows\system32\wermgr.exe	44
C:\Windows\system32\wermgr.exe	58
C:\WINDOWS\system32\wermgr.exe	43
C:\WINDOWS\system32\wermgr.exe	49
C:\Windows\system32\wermgr.exe	38
C:\Windows\system32\wermgr.exe	54
C:\Windows\system32\wermgr.exe	47
C:\Windows\system32\wermgr.exe	55
C:\Windows\system32\wermgr.exe	46
C:\Windows\system32\wermgr.exe	52
C:\windows\system32\wermgr.exe	60
C:\Windows\system32\werui.dll	43
C:\Windows\SysWOW64\WerFault.exe	43
C:\windows\SysWOW64\WerFault.exe	25
C:\Windows\SysWOW64\WerFaultSecure.exe	58
C:\Windows\SysWOW64\WerFaultSecure.exe	60
C:\Windows\SysWOW64\WerFaultSecure.exe	55
C:\Windows\SysWOW64\WerFaultSecure.exe	57
C:\WINDOWS\SysWOW64\WerFaultSecure.exe	57
C:\WINDOWS\SysWOW64\WerFaultSecure.exe	55
C:\Windows\SysWOW64\WerFaultSecure.exe	57
C:\Windows\SysWOW64\WerFaultSecure.exe	86
C:\Windows\SysWOW64\WerFaultSecure.exe	61
C:\Windows\SysWOW64\wermgr.exe	57
C:\windows\SysWOW64\wermgr.exe	61
C:\Windows\SysWOW64\wermgr.exe	43
C:\Windows\SysWOW64\wermgr.exe	36
C:\Windows\SysWOW64\wermgr.exe	33
C:\WINDOWS\SysWOW64\wermgr.exe	41
C:\Windows\SysWOW64\wermgr.exe	36
C:\Windows\SysWOW64\wermgr.exe	44
C:\WINDOWS\SysWOW64\wermgr.exe	44
C:\Windows\SysWOW64\wermgr.exe	40
C:\Windows\SysWOW64\wermgr.exe	40
C:\Windows\SysWOW64\wermgr.exe	38
C:\Windows\SysWOW64\werui.dll	46