fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178

Analysis

max time kernel
178s
max time network
228s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 15:47

Target

fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178.exe
Size

706KB
MD5

db544119e83c19203d04bc6d8d920d20
SHA1

14ae84dc88cf8b3994ff656f425a4a2ae7701f42
SHA256

fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178
SHA512

18184d4e5be64d930d2821ff1037570bc2f1ace5dbd18e9e5e652553e6b6bab0ac3e324efe007e364af33897bee7d66aeaae6d4a4cbc33d519185eb3c409742f
SSDEEP

3072:frA+LoAia6UlnRXs/W8a+/ZUV51tCRkMV1:f57zXlRXkZUV5zXMV

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4792 3112 WerFault.exe fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178.exe

pid	pid_target	process	target process
4792	3112	WerFault.exe	fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178.exe

C:\Users\Admin\AppData\Local\Temp\fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178.exe
"C:\Users\Admin\AppData\Local\Temp\fab8229e62e08b90135408dd263a9ef9e37edd51157bf268983638f10d2f4178.exe"
1⤵
PID:3112

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3112 -s 220
2⤵
- Program crash
PID:4792

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3112 -ip 3112
1⤵
PID:2904