8efe152dc8ee466069475867a147e3837657bcb480e85bb0bc0581e2065f9316

Analysis

max time kernel
279s
max time network
343s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 07:31

Target

8efe152dc8ee466069475867a147e3837657bcb480e85bb0bc0581e2065f9316.exe
Size

28KB
MD5

7c8461e2821c6912cc0c986b8229a31c
SHA1

a1514a965d00f35e646b6d05bcf02d36a580b01b
SHA256

8efe152dc8ee466069475867a147e3837657bcb480e85bb0bc0581e2065f9316
SHA512

cc519937e7eb812519b83916f71c34cbd07ca701ede0f13a992a156d2145e51fa7734cf36006c775e0dbf5c66c8868c71de6002f9cdb824aa288a54df17ebfbb
SSDEEP

384:nO66OXgIS6/ShMhBt2GWOmUbRr5NALn4aMMnQ/r+wG8oN9XuCE8:dUI3EMhhMUrnAD42MrhnoN9X

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4176	1532	WerFault.exe	80
4908	1532	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\8efe152dc8ee466069475867a147e3837657bcb480e85bb0bc0581e2065f9316.exe
"C:\Users\Admin\AppData\Local\Temp\8efe152dc8ee466069475867a147e3837657bcb480e85bb0bc0581e2065f9316.exe"
1⤵
PID:1532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 252
  2⤵
  - Program crash
  PID:4176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 264
  2⤵
  - Program crash
  PID:4908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1532 -ip 1532
1⤵
PID:3128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 1532 -ip 1532
1⤵
PID:2692

memory/1532-132-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download