e5f9e18081e15ee51db7329d9755b4982068504f3336cffc18b49f1d5f4da128

Analysis

max time kernel
192s
max time network
207s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 07:58

Target

e5f9e18081e15ee51db7329d9755b4982068504f3336cffc18b49f1d5f4da128.exe
Size

24KB
MD5

9360ec2a5e87f70057c5d484bb33811b
SHA1

fe0bd0ee5260d04ea2b65a6864aa6d66b059571b
SHA256

e5f9e18081e15ee51db7329d9755b4982068504f3336cffc18b49f1d5f4da128
SHA512

4fdabe1ac382b365392332adb2e784f0e489dff6f2bb5f3a7d1284801019df745256fa967b28f6366be978fef32357007eee28e8856bab4a8ecdd2343f3ea2ba
SSDEEP

192:38jSbzPnPqNO/6K+7K9itn6hdDTlrPtvEJXa6aaX6rxm5Yw:38SPnPq0/d90GtTjTqMc5

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3480	4160	WerFault.exe	81
2372	4160	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\e5f9e18081e15ee51db7329d9755b4982068504f3336cffc18b49f1d5f4da128.exe
"C:\Users\Admin\AppData\Local\Temp\e5f9e18081e15ee51db7329d9755b4982068504f3336cffc18b49f1d5f4da128.exe"
1⤵
PID:4160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 256
  2⤵
  - Program crash
  PID:3480
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 252
  2⤵
  - Program crash
  PID:2372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4160 -ip 4160
1⤵
PID:2044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4160 -ip 4160
1⤵
PID:1284

memory/4160-132-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/4160-133-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download