29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0

Analysis

max time kernel
148s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
23-04-2024 15:32

Target

29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0.exe
Size

408KB
MD5

5c46daddcc29c58ae6b524f354e1cce8
SHA1

42fe7c2bfbebfa0d1d2f0fc687033a32e2dfe7b1
SHA256

29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0
SHA512

1d5478fc1fa5805019623974b107c3dc47976d0e0bff8ff92ad2d9ee605e9f3088755f63cbe47d79489099887262aade0dc27fd13fd4b52ce485a14488dd0212
SSDEEP

6144:kPUf8LDcdWhhLUJmE3oP8GeQp7C2SDxLGns8vR9Eac:kPUf8LDjLU0K28GPGrDl

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
2028	4708	WerFault.exe	29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0.exe
2376	4708	WerFault.exe	29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0.exe

C:\Users\Admin\AppData\Local\Temp\29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0.exe
"C:\Users\Admin\AppData\Local\Temp\29b0bd5a8573ebd7443c3355e81d8abe4694d2f4d80eee13d8746d1307f388e0.exe"
1⤵
PID:4708
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4708 -s 492
  2⤵
  - Program crash
  PID:2028
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4708 -s 1168
  2⤵
  - Program crash
  PID:2376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 352 -p 4708 -ip 4708
1⤵
PID:2176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 4708 -ip 4708
1⤵
PID:688

memory/4708-1-0x0000000004370000-0x0000000004470000-memory.dmp

Filesize
1024KB

Download
memory/4708-2-0x00000000042E0000-0x000000000432B000-memory.dmp

Filesize
300KB

Download
memory/4708-3-0x0000000000400000-0x000000000405A000-memory.dmp

Filesize
60.4MB

Download
memory/4708-4-0x00000000042E0000-0x000000000432B000-memory.dmp

Filesize
300KB

Download