b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7

Analysis

max time kernel
168s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:21

Target

b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7.exe
Size

207KB
MD5

1715d8e0281f0d9bccd81f251f5fe674
SHA1

540ee28722e8dcc66e4e52a3c389f771723c92dc
SHA256

b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7
SHA512

4bc35ce66f32f4d9af749168b012f976a8cdd3586b1f97f0921935320e0402cf58e23e13fcaf4edaae782725ca7b3daa347d73a8d05e64fa599055c18dfe2cbb
SSDEEP

6144:1u0BDXL+5d9XyUSYoFKEDtDBNUyRZXJNF:00BDXLAHCHYoFKO93UyRZXrF

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1668 5020 WerFault.exe b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7.exe

pid	pid_target	process	target process
1668	5020	WerFault.exe	b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7.exe

C:\Users\Admin\AppData\Local\Temp\b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7.exe
"C:\Users\Admin\AppData\Local\Temp\b12d5858c5ad9c1bc901b0b36942dabeae6c491af4a5555c4df83864683956a7.exe"
1⤵
PID:5020
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5020 -s 388
  2⤵
  - Program crash
  PID:1668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5020 -ip 5020
1⤵
PID:1556