9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230

Analysis

max time kernel
91s
max time network
96s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
20-04-2024 05:29

Target

9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230.exe
Size

450KB
MD5

992791fc7db91427dddfa81b24803abe
SHA1

6b486fb9e356ab529879a87be74e2f6989754a04
SHA256

9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230
SHA512

d67830d5358a29a28b2370cea5312bf02c84c5c317022ea000859544f4c1e20975123fbc67b1b2b8004b40393618c394b6239048a0a360fef7d4498895613271
SSDEEP

6144:M230xgocQ2jZbrR4yFspz7arXReT8A0d/Tv6aHUGXn:M230+62jZblLFsd/T8Ag/Wa0G

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3484 1900 WerFault.exe 9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230.exe

pid	pid_target	process	target process
3484	1900	WerFault.exe	9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230.exe

C:\Users\Admin\AppData\Local\Temp\9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230.exe
"C:\Users\Admin\AppData\Local\Temp\9aa499f29a088705515b44e70d4f6165541b0d82f62bc94664566c125573e230.exe"
1⤵
PID:1900
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1900 -s 1368
  2⤵
  - Program crash
  PID:3484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1900 -ip 1900
1⤵
PID:1112

memory/1900-1-0x0000000001C50000-0x0000000001D50000-memory.dmp

Filesize
1024KB

Download
memory/1900-2-0x0000000003880000-0x00000000038CE000-memory.dmp

Filesize
312KB

Download
memory/1900-3-0x0000000000400000-0x0000000001A3B000-memory.dmp

Filesize
22.2MB

Download
memory/1900-5-0x0000000001C50000-0x0000000001D50000-memory.dmp

Filesize
1024KB

Download