8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c

Analysis

max time kernel
325s
max time network
404s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:15

Target

8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe
Size

199KB
MD5

212ef99d4f7728c29d2676ad566fccd8
SHA1

1aaaa2122e9817fd7972ab797fc2f6e10b7e1cd9
SHA256

8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c
SHA512

f6689ecb7c76f3ee519f4bcba90949f31706e1fa76636b83ca1e51c5bd9d0b218ed125b39714563c5adc7690e1008bba0fa2ca968c2725d8cc1508dc874d456f
SSDEEP

3072:YhxrZE7GjmNMOAw9iBEYX8eeGIQauOUsMXMkuzUh7IkBeXHea8U8ajt:Yhxl+ESMHjKkeTvUsMD4NkAXHaiR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4180 1884 WerFault.exe 8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe

pid	pid_target	process	target process
4180	1884	WerFault.exe	8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe

C:\Users\Admin\AppData\Local\Temp\8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe
"C:\Users\Admin\AppData\Local\Temp\8b7829964f139a739dd33889e80b06b9c50e57ae4610c7fdf60c3a36ad08862c.exe"
1⤵
PID:1884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 272
2⤵
- Program crash
PID:4180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1884 -ip 1884
1⤵
PID:5100