b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019

Analysis

max time kernel
147s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
25-04-2024 21:52

Target

b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe
Size

366KB
MD5

e72663ab3dbf44d57c11e5a0f3b10715
SHA1

8c9e266eb360f3369ac49f8306e0171493fe6642
SHA256

b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019
SHA512

c992c5d2423ae89066d1a0b2a80f4fba9089960e7848a50e4113fc2445f555f38762fa42ebeb995bb769085801cd450985f92ecce255393ddc3c95b454ec2f83
SSDEEP

6144:kLqQrDvkfWMB6BNUf0PiraXb8bniyJxbmRf:kLqQrfe6BN5hXIbiyJtm

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
2308	5092	WerFault.exe	b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe
4852	5092	WerFault.exe	b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe

C:\Users\Admin\AppData\Local\Temp\b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe
"C:\Users\Admin\AppData\Local\Temp\b1744e8ede4ec6a1b011d1532f0925851240557ad3b86d4eb4bdbd5b85058019.exe"
1⤵
PID:5092
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 1352
  2⤵
  - Program crash
  PID:2308
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 1364
  2⤵
  - Program crash
  PID:4852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5092 -ip 5092
1⤵
PID:876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5092 -ip 5092
1⤵
PID:4968

memory/5092-1-0x0000000000930000-0x0000000000A30000-memory.dmp

Filesize
1024KB

Download
memory/5092-2-0x00000000026E0000-0x000000000272B000-memory.dmp

Filesize
300KB

Download
memory/5092-3-0x0000000000400000-0x000000000085D000-memory.dmp

Filesize
4.4MB

Download