04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5

Analysis

max time kernel
148s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
19-04-2024 14:08

Target

04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe
Size

413KB
MD5

08b3df05ea806344a543228ba26cac43
SHA1

133bc4c29d3d9d9db2dee79b1c0d37e3bef1524d
SHA256

04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5
SHA512

cf6a5e5250d255e9fbe4422eebc86cc8caa1ed2e9e0a03d8b76b1563039a3668d6591c4846bdca15cd876d5305704d15c63c4a54e95f571d79a0e9726246f241
SSDEEP

6144:BJ54gaoc84NTb0lu1jHlsGZsoouIu7AZrXOfkFFqCTz:BJ54Fu4NTb0lO1yBLResvqy

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4388 4480 WerFault.exe 04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe

pid	pid_target	process	target process
4388	4480	WerFault.exe	04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe

C:\Users\Admin\AppData\Local\Temp\04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe
"C:\Users\Admin\AppData\Local\Temp\04671313875b99e764ee6607a3f967b7029fc6a7bbe1b6332c02d1ac3f4515b5.exe"
1⤵
PID:4480
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4480 -s 1168
  2⤵
  - Program crash
  PID:4388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4480 -ip 4480
1⤵
PID:328

memory/4480-1-0x0000000001C20000-0x0000000001D20000-memory.dmp

Filesize
1024KB

Download
memory/4480-2-0x0000000003880000-0x00000000038CE000-memory.dmp

Filesize
312KB

Download
memory/4480-3-0x0000000000400000-0x0000000001A32000-memory.dmp

Filesize
22.2MB

Download
memory/4480-4-0x0000000000400000-0x0000000001A32000-memory.dmp

Filesize
22.2MB

Download
memory/4480-5-0x0000000003880000-0x00000000038CE000-memory.dmp

Filesize
312KB

Download