5823d58356180e90e23d81643bf34913e1cf0dad1d03961a0524fc229922070d

Analysis

max time kernel
225s
max time network
248s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 12:25

Target

5823d58356180e90e23d81643bf34913e1cf0dad1d03961a0524fc229922070d.exe
Size

28KB
MD5

17fe1805cf36eecd4f1a9e1321c22d4b
SHA1

1c320b721d260ceadbf5a16373678da407edc691
SHA256

5823d58356180e90e23d81643bf34913e1cf0dad1d03961a0524fc229922070d
SHA512

2be880f6a21de4e445b1d445ded619016d91a34ea1ad313fc80fcf28a3428969edef6fe02590f969c39a65c9bc48aa25e01c3f876ac85fb959db76d7774ef414
SSDEEP

96:/dbAzWiWg0LMWxflHwc8rNpWtqkCqxrpfyjvPJT/+ftVfGWhEkmfROkyPC:/dbAzLWr31wkqkCDjvPJTmVVf5hEb5

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4476	2896	WerFault.exe	83
1440	2896	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\5823d58356180e90e23d81643bf34913e1cf0dad1d03961a0524fc229922070d.exe
"C:\Users\Admin\AppData\Local\Temp\5823d58356180e90e23d81643bf34913e1cf0dad1d03961a0524fc229922070d.exe"
1⤵
PID:2896
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2896 -s 256
  2⤵
  - Program crash
  PID:4476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2896 -s 284
  2⤵
  - Program crash
  PID:1440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 2896 -ip 2896
1⤵
PID:3604

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 2896 -ip 2896
1⤵
PID:1516

memory/2896-132-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2896-133-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download