17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e

Analysis

max time kernel
147s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
24-04-2024 20:05

Target

17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e.exe
Size

359KB
MD5

fb7603ee0dd42c7eb20fafff6c8d92c0
SHA1

86e2aab96a8ccd61466416a2af082c8cdccf4558
SHA256

17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e
SHA512

6ebe037cd92796f47e084bde5f40f07d339d9a43f726ef75adc064930468ac036ac324b90fce115e8bedecf160ed8308e302df1ee5190dc95dba088427baa03d
SSDEEP

6144:BlRhbZltooTk8czlCycsBMtbD48QDoCQ7fdlxUKwnqdEL4tLZ:Brh1bbczlOfkxDlQ7fdlQnqdELuLZ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1224 1728 WerFault.exe 17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e.exe

pid	pid_target	process	target process
1224	1728	WerFault.exe	17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e.exe

C:\Users\Admin\AppData\Local\Temp\17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e.exe
"C:\Users\Admin\AppData\Local\Temp\17079c3925c69bef7240ee09feeffd3a18733f8a1e6743f384353ad236e7034e.exe"
1⤵
PID:1728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 1244
  2⤵
  - Program crash
  PID:1224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1728 -ip 1728
1⤵
PID:2184

memory/1728-1-0x0000000004150000-0x0000000004250000-memory.dmp

Filesize
1024KB

Download
memory/1728-2-0x0000000005E90000-0x0000000005EDB000-memory.dmp

Filesize
300KB

Download
memory/1728-3-0x0000000000400000-0x000000000404B000-memory.dmp

Filesize
60.3MB

Download
memory/1728-5-0x0000000004150000-0x0000000004250000-memory.dmp

Filesize
1024KB

Download
memory/1728-6-0x0000000000400000-0x000000000404B000-memory.dmp

Filesize
60.3MB

Download