fdc79ee4900a0efa4ae86b4b12cbbb16a4d76609731227102ebbfc30a7268d29

Analysis

max time kernel
92s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
12/05/2024, 09:00

Target

fdc79ee4900a0efa4ae86b4b12cbbb16a4d76609731227102ebbfc30a7268d29.exe
Size

328KB
MD5

e38e157b23b033efa6c8ad8d8c2058b2
SHA1

a0cecb32d4f4f09db3a1de4d4b6acd442e600c9f
SHA256

fdc79ee4900a0efa4ae86b4b12cbbb16a4d76609731227102ebbfc30a7268d29
SHA512

c4a801689bfc02d1dd81cb1899db3bac81b7c3f615215a4ae9f1d22327524c2133a00914e1509ebbca818a986db72c59bce435c7d3b35c33d9f188c370958d52
SSDEEP

6144:gEIs90WUUsLbhiMmrgi+RCo7Fre+p1jUoaGF2UUa:gEIiPXsLxigi+XFqu1woy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1096	1692	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\fdc79ee4900a0efa4ae86b4b12cbbb16a4d76609731227102ebbfc30a7268d29.exe
"C:\Users\Admin\AppData\Local\Temp\fdc79ee4900a0efa4ae86b4b12cbbb16a4d76609731227102ebbfc30a7268d29.exe"
1⤵
PID:1692
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1692 -s 400
  2⤵
  - Program crash
  PID:1096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1692 -ip 1692
1⤵
PID:692

memory/1692-1-0x0000000000B50000-0x0000000000C50000-memory.dmp

Filesize
1024KB

Download
memory/1692-3-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/1692-2-0x00000000024F0000-0x000000000253C000-memory.dmp

Filesize
304KB

Download
memory/1692-5-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/1692-4-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download