218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e

Analysis

max time kernel
107s
max time network
124s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
23-04-2024 20:00

Target

218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e.exe
Size

408KB
MD5

0726869b9a2e8818d4cfa18350ad67e0
SHA1

66ccfde7d79c0b6beaee4943426b53967942a8c2
SHA256

218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e
SHA512

74470b64da897d801dcd8351455d7b0d0d888519bf18340b32fb39ec085bf8ea15a004ae561b00e57b9efd58c6b25dc1657a4b2c6db82a36c6f7e98bd64393a4
SSDEEP

6144:QiFIhQX31T3r7YaVWqHRQ/x2dBKd6nQaw1QotAGULXz5KqbI:VFIhQH1rr7PDR6x2LKd601QgAtD7E

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3116 4640 WerFault.exe 218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e.exe

pid	pid_target	process	target process
3116	4640	WerFault.exe	218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e.exe

C:\Users\Admin\AppData\Local\Temp\218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e.exe
"C:\Users\Admin\AppData\Local\Temp\218b4e85dc9134bd8948b3107078256de16d4838a6cd9267d50e96c33cefe29e.exe"
1⤵
PID:4640
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4640 -s 1192
  2⤵
  - Program crash
  PID:3116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4640 -ip 4640
1⤵
PID:2936

memory/4640-1-0x0000000004370000-0x0000000004470000-memory.dmp

Filesize
1024KB

Download
memory/4640-2-0x0000000004300000-0x000000000434B000-memory.dmp

Filesize
300KB

Download
memory/4640-3-0x0000000000400000-0x0000000004056000-memory.dmp

Filesize
60.3MB

Download