1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed

Analysis

max time kernel
90s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 00:36

Target

1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed.exe
Size

294KB
MD5

15ae271c62f1481f43b088f4bceeafb0
SHA1

c93f241e64e4f8a83626aa41761eb2559a6a3285
SHA256

1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed
SHA512

6fa1e8512a57f4d6013908a3e27962982a6ca4abef2cfc154a97dfebc0a2e0034ba59b4e38a6a286e2cd8759193a46ff31927ce80703d79a116057788548fbef
SSDEEP

6144:rO/pR4Cu+t2iiXsxVZIVowbkOOZZ2D6YmxXdL+RuY:rOxR4p2fvZh8C2eYmxXsRD

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4104 4872 WerFault.exe 1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed.exe

pid	pid_target	process	target process
4104	4872	WerFault.exe	1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed.exe

C:\Users\Admin\AppData\Local\Temp\1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed.exe
"C:\Users\Admin\AppData\Local\Temp\1b8d3cd3e8d1b278b9abd490bdb3f6d7999cd7793124c656d573d445d23756ed.exe"
1⤵
PID:4872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 192
2⤵
- Program crash
PID:4104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4872 -ip 4872
1⤵
PID:4788

memory/4872-132-0x0000000000400000-0x000000000046FBC4-memory.dmp

Filesize
446KB

Download