e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369

Analysis

max time kernel
146s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
25-04-2024 19:20

Target

e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe
Size

343KB
MD5

287c30803659edada0dd0f55a0a5df5e
SHA1

b6258585efa4dea45f4a3f713c459f7d161808a9
SHA256

e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369
SHA512

4df2168dc546a5279742b798e0b5bbafba5de1f5afc116cf6dea86c1c9a1e565ca15ac3bdd835fc8e611be135d626b7c582ae9c95cc7531e893e829e9c33d167
SSDEEP

6144:4sRmkdm6ouUlynbAqzpaQyg4aE84eZ26Zhs1Mr80gDo:zRmkdauWStdaQB1IeZPaWoF

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2344 4596 WerFault.exe e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe

pid	pid_target	process	target process
2344	4596	WerFault.exe	e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe

C:\Users\Admin\AppData\Local\Temp\e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe
"C:\Users\Admin\AppData\Local\Temp\e28787ace5fe08448ff5002119354bd37d7e6df439e9f41724252eaa9b74d369.exe"
1⤵
PID:4596
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4596 -s 1184
  2⤵
  - Program crash
  PID:2344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4596 -ip 4596
1⤵
PID:2056

memory/4596-1-0x0000000002DA0000-0x0000000002EA0000-memory.dmp

Filesize
1024KB

Download
memory/4596-2-0x00000000031B0000-0x00000000031FB000-memory.dmp

Filesize
300KB

Download
memory/4596-3-0x0000000000400000-0x0000000002C39000-memory.dmp

Filesize
40.2MB

Download
memory/4596-4-0x0000000000400000-0x0000000002C39000-memory.dmp

Filesize
40.2MB

Download
memory/4596-6-0x00000000031B0000-0x00000000031FB000-memory.dmp

Filesize
300KB

Download