35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef

Analysis

max time kernel
147s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
25-04-2024 15:55

Target

35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef.exe
Size

343KB
MD5

3860bc91fb32028b5a082e07183f11cf
SHA1

7e63dcf2e86cb07cd845f4123ff55f268ce0e047
SHA256

35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef
SHA512

4389768668534b42e082be774f75bb07b09cf477f6038f712eadee0627f17661541ab358f94dbb84932468f96fb247311f368815b1df133ed94928e3f33a18af
SSDEEP

6144:4v14dspk56rv5tw1EYCvWhykq0dRr/aCOrUJ4K:g1UsgiRY8H0dRL

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2964 1160 WerFault.exe 35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef.exe

pid	pid_target	process	target process
2964	1160	WerFault.exe	35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef.exe

C:\Users\Admin\AppData\Local\Temp\35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef.exe
"C:\Users\Admin\AppData\Local\Temp\35c64f10ad8a9c3ae4bdc19bff4388a1869379cd37a8de9912ea92ecb8bb5eef.exe"
1⤵
PID:1160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 1412
2⤵
- Program crash
PID:2964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1160 -ip 1160
1⤵
PID:1388

memory/1160-1-0x0000000002E10000-0x0000000002F10000-memory.dmp

Filesize
1024KB

Download
memory/1160-2-0x00000000031E0000-0x000000000322B000-memory.dmp

Filesize
300KB

Download
memory/1160-3-0x0000000000400000-0x0000000002C39000-memory.dmp

Filesize
40.2MB

Download
memory/1160-4-0x0000000000400000-0x0000000002C39000-memory.dmp

Filesize
40.2MB

Download
memory/1160-5-0x00000000031E0000-0x000000000322B000-memory.dmp

Filesize
300KB

Download