4f68f9833cea4a02e40f673577ff0254e177b1aa3050f546f6f28a1d48ae6388

Analysis

max time kernel
86s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20240214-en
resource tags

arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
submitted
11-04-2024 09:51

Target

4f68f9833cea4a02e40f673577ff0254e177b1aa3050f546f6f28a1d48ae6388.exe
Size

370KB
MD5

9de1605dfd15d660ece0b15a96f1c7fe
SHA1

f82c99555720c8713b97b76c3d3424fc21920089
SHA256

4f68f9833cea4a02e40f673577ff0254e177b1aa3050f546f6f28a1d48ae6388
SHA512

555a95a8651adfd751c1ba3d762edbc996e01586eeaaaca2dd16bf5b53e676976e06bd7ef8f7e5e5ff964ea52bcd566bd221e1b09987c5bdc085eb273f93e6de
SSDEEP

6144:OCVbGAo9URkZl1OeBOEC10F98QKS+6e9x68ltF9p:pMAkURkzLDC10FPuXjD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
648	752	WerFault.exe	75

C:\Users\Admin\AppData\Local\Temp\4f68f9833cea4a02e40f673577ff0254e177b1aa3050f546f6f28a1d48ae6388.exe
"C:\Users\Admin\AppData\Local\Temp\4f68f9833cea4a02e40f673577ff0254e177b1aa3050f546f6f28a1d48ae6388.exe"
1⤵
PID:752
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 752 -s 420
  2⤵
  - Program crash
  PID:648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 752 -ip 752
1⤵
PID:5076

memory/752-1-0x00000000030A0000-0x00000000031A0000-memory.dmp

Filesize
1024KB

Download
memory/752-2-0x0000000004B80000-0x0000000004BC6000-memory.dmp

Filesize
280KB

Download
memory/752-3-0x0000000004BD0000-0x0000000004BD1000-memory.dmp

Filesize
4KB

Download
memory/752-4-0x0000000000400000-0x0000000002D3B000-memory.dmp

Filesize
41.2MB

Download
memory/752-6-0x0000000004B80000-0x0000000004BC6000-memory.dmp

Filesize
280KB

Download