e15c193bf927224141b14a95ef30b8ba7b5a0055e39bec478dac0f75e1fad650

Analysis

max time kernel
77s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01-06-2023 13:55

Target

1304-55-0x0000000000400000-0x0000000000520000-memory.exe
Size

1.1MB
MD5

b5bd18f88703bd4ab2118ebe79c599e4
SHA1

b0d67ef1d4e2f3c79ebe62695cf1a58023bcb580
SHA256

e15c193bf927224141b14a95ef30b8ba7b5a0055e39bec478dac0f75e1fad650
SHA512

bf03915dd501b18bb664f4cb45ccef3ebee14e9ecc8c0936a44b9fb219fc6d488644637a9338cd6d80530a1dfd3e2b51c180d358466ec4b1595fbcfb66dbc94b
SSDEEP

12288:n0Ht9Tp+l0EqE1can/HVk0bXr5OjRPXSvvhkpTPX3/p:k7TEKScWy0bXrwjR/ukpTPR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4120 4300 WerFault.exe 1304-55-0x0000000000400000-0x0000000000520000-memory.exe

pid	pid_target	process	target process
4120	4300	WerFault.exe	1304-55-0x0000000000400000-0x0000000000520000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1304-55-0x0000000000400000-0x0000000000520000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1304-55-0x0000000000400000-0x0000000000520000-memory.exe"
1⤵
PID:4300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4300 -s 144
2⤵
- Program crash
PID:4120

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4300 -ip 4300
1⤵
PID:4012