57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2

Analysis

max time kernel
91s
max time network
99s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
25-04-2024 23:40

Target

57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2.exe
Size

342KB
MD5

4121f052727d2038429dcd272fbf4d8a
SHA1

aea4cc5b36dd10dd5fe51821e669b5af43dd2724
SHA256

57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2
SHA512

47eee70a8aaf29509f5d8473c6de5434e09c4fdfd97877ee374ca0c2f94f0b6f8c83be762ede5c30c62f50f5490dfde99e179e83ec27e950d91d119ffe1a8e48
SSDEEP

6144:JvQQpB8YoYwlbUodqBI1pkdlyxSsQbynnrc:JvJHVcb1d/ppj

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
880	472	WerFault.exe	57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2.exe
1352	472	WerFault.exe	57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2.exe

C:\Users\Admin\AppData\Local\Temp\57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2.exe
"C:\Users\Admin\AppData\Local\Temp\57063e2aaf312315568b83b6eec88f9033c69a2f8a157684089c6c26e264d0a2.exe"
1⤵
PID:472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 472 -s 1204
2⤵
- Program crash
PID:880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 472 -s 1320
2⤵
- Program crash
PID:1352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 472 -ip 472
1⤵
PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 472 -ip 472
1⤵
PID:1508

memory/472-1-0x0000000002DD0000-0x0000000002ED0000-memory.dmp

Filesize
1024KB

Download
memory/472-2-0x00000000031E0000-0x000000000322B000-memory.dmp

Filesize
300KB

Download
memory/472-3-0x0000000000400000-0x0000000002C39000-memory.dmp

Filesize
40.2MB

Download
memory/472-5-0x00000000031E0000-0x000000000322B000-memory.dmp

Filesize
300KB

Download