f11fb31637fbda89d536f95c957870eec898b52a47773f87eb40539517c5af2e

Analysis

max time kernel
90s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
15-05-2024 09:53

Target

f11fb31637fbda89d536f95c957870eec898b52a47773f87eb40539517c5af2e.exe
Size

324KB
MD5

45c3870d01a2f94eb195868aa3f898d3
SHA1

179fac6955128ef39ca0a49a9867253352c9b7a0
SHA256

f11fb31637fbda89d536f95c957870eec898b52a47773f87eb40539517c5af2e
SHA512

648c5e05dd000f58de903ca89a4b5eb147b410d2fc0946fb753610b44c72fa69fd2e1dfdfff912ec05c169784d4148e00661430805a09740314f455b9db47a12
SSDEEP

6144:s9f4m84pURJFGa81N4HU1+QPNjgr+jEG:04mRpURvGa8rkr+jv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5020	3004	WerFault.exe	76

C:\Users\Admin\AppData\Local\Temp\f11fb31637fbda89d536f95c957870eec898b52a47773f87eb40539517c5af2e.exe
"C:\Users\Admin\AppData\Local\Temp\f11fb31637fbda89d536f95c957870eec898b52a47773f87eb40539517c5af2e.exe"
1⤵
PID:3004
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3004 -s 1216
  2⤵
  - Program crash
  PID:5020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3004 -ip 3004
1⤵
PID:4664

memory/3004-1-0x0000000002960000-0x0000000002A60000-memory.dmp

Filesize
1024KB

Download
memory/3004-2-0x0000000004440000-0x000000000448C000-memory.dmp

Filesize
304KB

Download
memory/3004-3-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/3004-4-0x0000000000400000-0x000000000273E000-memory.dmp

Filesize
35.2MB

Download
memory/3004-7-0x0000000000400000-0x0000000000456000-memory.dmp

Filesize
344KB

Download
memory/3004-6-0x0000000004440000-0x000000000448C000-memory.dmp

Filesize
304KB

Download