5b13a600f112ab2cc10d3ffc897b72db35807e51edb1f9ed55d38923decd74b9

Analysis

max time kernel
186s
max time network
202s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 08:52

Target

5b13a600f112ab2cc10d3ffc897b72db35807e51edb1f9ed55d38923decd74b9.exe
Size

420KB
MD5

e15a1d0686d001f8c989b7adb0f8ae43
SHA1

c25a438ee43f743ddfc731446b407ec15dcdf974
SHA256

5b13a600f112ab2cc10d3ffc897b72db35807e51edb1f9ed55d38923decd74b9
SHA512

8942d163a00f7df7cb3c1154b6c6a21a66036dd07947f3f713d63fe72315a1acc28e567a28adc26bb433eebeb201b0966ba3cf4a9d44b43bea49519f21ce31d7
SSDEEP

6144:wk+gg+JjwaiMquKrPDQnOGZk3Vsb5XpkxLOaMHI8gKcFbpZ6woQfME4ty:wkFnjD/quKrrQnzZkl98BTwdZPNf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1020	2192	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\5b13a600f112ab2cc10d3ffc897b72db35807e51edb1f9ed55d38923decd74b9.exe
"C:\Users\Admin\AppData\Local\Temp\5b13a600f112ab2cc10d3ffc897b72db35807e51edb1f9ed55d38923decd74b9.exe"
1⤵
PID:2192
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2192 -s 524
  2⤵
  - Program crash
  PID:1020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2192 -ip 2192
1⤵
PID:1636

memory/2192-132-0x0000000000610000-0x000000000062D000-memory.dmp

Filesize
116KB

Download
memory/2192-133-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/2192-134-0x0000000000610000-0x000000000062D000-memory.dmp

Filesize
116KB

Download