577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f

Analysis

max time kernel
146s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
21-04-2024 01:03

Target

577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f.exe
Size

398KB
MD5

02492adf602a70d09f0520f23280403c
SHA1

2f5f87c0f86c16650044b3f0f4637227999541f6
SHA256

577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f
SHA512

b6b82032f1e94970212491ddec8bb1eaa38c25268cef36c3f52740f92541cf85abb0b3984e9b44810075f964a73b46d93078f0e117c6491ab53938d94e17cc2e
SSDEEP

6144:ICYE0CcCmmil+laBdrmnw3raMhxA/D9Lji:JYEjk0MLrrFhii

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
1092	4340	WerFault.exe	577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f.exe
1600	4340	WerFault.exe	577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f.exe

C:\Users\Admin\AppData\Local\Temp\577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f.exe
"C:\Users\Admin\AppData\Local\Temp\577397599208055a6b34dbb16ebb0c369f8968482f04df17aa639c9f8d81891f.exe"
1⤵
PID:4340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4340 -s 1348
  2⤵
  - Program crash
  PID:1092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4340 -s 1360
  2⤵
  - Program crash
  PID:1600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4340 -ip 4340
1⤵
PID:3840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 4340 -ip 4340
1⤵
PID:2732

memory/4340-1-0x0000000001C50000-0x0000000001D50000-memory.dmp

Filesize
1024KB

Download
memory/4340-2-0x00000000038C0000-0x000000000390E000-memory.dmp

Filesize
312KB

Download
memory/4340-3-0x0000000000400000-0x0000000001A2E000-memory.dmp

Filesize
22.2MB

Download
memory/4340-5-0x0000000000400000-0x0000000001A2E000-memory.dmp

Filesize
22.2MB

Download
memory/4340-6-0x00000000038C0000-0x000000000390E000-memory.dmp

Filesize
312KB

Download