8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c

Analysis

max time kernel
95s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 22:29

Target

8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c.exe
Size

470KB
MD5

cf7de1ed13303fe1662fc16f9805443e
SHA1

565f148a18c3fbf70738ffb2cf702de40cf3827d
SHA256

8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c
SHA512

a58361350c7edd55e02410878e391e3ed886b0fd7dcd79f9849acea0e4473d0ec9394b1e220548c1f667b53abfbcabcd16293a07bea5272873cc8b051c1475f4
SSDEEP

6144:uKlUWeLUf/jdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgy1:ueSueOkodHq9d+1U0rWSB7oCqB53

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5016 4972 WerFault.exe 8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c.exe

pid	pid_target	process	target process
5016	4972	WerFault.exe	8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c.exe

C:\Users\Admin\AppData\Local\Temp\8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c.exe
"C:\Users\Admin\AppData\Local\Temp\8c78a36cafd04f2d11dad321dc16c0c383d83fac7fa704018b34990a3f1c5e0c.exe"
1⤵
PID:4972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 560
2⤵
- Program crash
PID:5016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4972 -ip 4972
1⤵
PID:2232

memory/4972-132-0x0000000002340000-0x0000000002345000-memory.dmp

Filesize
20KB

Download
memory/4972-133-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download