5b46abaf2cad73275f4913157adf5049b1128909ebbe0fdb675f282784010d38

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20251231-en
resource tags

arch:x64arch:x86image:win11-20251231-enlocale:en-usos:windows11-21h2-x64system
submitted
18/01/2026, 04:12

Target
5432-4959-0x0000000000B20000-0x00000000014F7000-memory.exe
Size 9.8MB
Sample260118-est5maey3a
SHA256 5b46abaf2cad73275f4913157adf5049b1128909ebbe0fdb675f282784010d38
MD5 ca82362e2270c2f1653c10bd8a40ba8e
SHA1 33761708e00c556e322cfb751c76e95573d746f4
SHA512 db23460b96784a98a72a7cb3263d49cd74d914fae47e4b8d9d0f6eb647c2a00dcb5613ee420860aec0bbd53cdff3fc002a887027a8a6443194ec640838a93fe5
SSDEEP 196608:7zRp5bp2fO1ODNDYOBUTCOu8jMd0CNmDFhGhVb4v0cWma3R:fv2pDN80fHd4FhyJ4v0c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5080	4764	WerFault.exe	76

C:\Users\Admin\AppData\Local\Temp\5432-4959-0x0000000000B20000-0x00000000014F7000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\5432-4959-0x0000000000B20000-0x00000000014F7000-memory.exe"
1⤵
PID:4764
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4764 -s 8
  2⤵
  - Program crash
  PID:5080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4764 -ip 4764
1⤵
PID:4856