5d5be3b5250e46f635fb6a06f2fb93a9c25aeb2c5da83a23e640c7fe7bda3588

Analysis

max time kernel
85s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30/01/2023, 18:14

Target

2372-246-0x0000000000400000-0x0000000000471000-memory.exe
Size

452KB
MD5

cba05efa073fde970104557df7ed9979
SHA1

506e36dbba11868a392cd04ad1865bd2f21869bd
SHA256

5d5be3b5250e46f635fb6a06f2fb93a9c25aeb2c5da83a23e640c7fe7bda3588
SHA512

103f53e031f4e784029d4bf92f8a8ff1fe88bcdb479ef8f4dd003f6ec2cce9a968962bd6ee37eab344274e3ff7495b6919cd681b704b749aad72e672bd422a4d
SSDEEP

6144:w1R9rz1Q1i9dGeLEcFGE+2u35WHff63UVTzbd:w1Rdz1T9RLBpNu35s64/d

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
808	1092	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2372-246-0x0000000000400000-0x0000000000471000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2372-246-0x0000000000400000-0x0000000000471000-memory.exe"
1⤵
PID:1092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1092 -s 140
  2⤵
  - Program crash
  PID:808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1092 -ip 1092
1⤵
PID:1624