8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4

Analysis

max time kernel
186s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:42

Target

8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe
Size

52KB
MD5

254372ec902e060399bbd9c724fdec70
SHA1

fa7fce791f4eae2bf845936c18714963d0ca40c3
SHA256

8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4
SHA512

7067f20ff950151c75bb756b9aafddb6caece0dbb23cc68f3657c4623c3bf2da69379ab5f6688db6f1e44ba3cbb2ffe83b390f6099498f9aca3bf30efbae30d0
SSDEEP

768:Yrqr4OZXg1d1xDqR2y+jLilHxcC9KYerq4UN7rJ4GBgE07QUg6qs:UqHZXO1Wb+/i1h44p4GnfL

Score

3^/10

Program crash 4 IoCs

Processes:

WerFault.exeWerFault.exeWerFault.exeWerFault.exe

pid	pid_target	process	target process
3736	1496	WerFault.exe	8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe
3128	1496	WerFault.exe	8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe
1508	1496	WerFault.exe	8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe
112	1496	WerFault.exe	8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe

C:\Users\Admin\AppData\Local\Temp\8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe
"C:\Users\Admin\AppData\Local\Temp\8cb5b658bcc8e0b2ff75d0d037b4970dbcb81aadbab7334cac8d9198b61fe4a4.exe"
1⤵
PID:1496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 424
2⤵
- Program crash
PID:3736

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 460
2⤵
- Program crash
PID:3128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 468
2⤵
- Program crash
PID:1508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 476
2⤵
- Program crash
PID:112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 1496 -ip 1496
1⤵
PID:4368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1496 -ip 1496
1⤵
PID:1332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 1496 -ip 1496
1⤵
PID:2664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 1496 -ip 1496
1⤵
PID:260