f82faa84a52dccddd99ed590410194946fee0382fa530ea1e9e1c7c6d61eccc5

Analysis

max time kernel
146s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
16/05/2024, 23:35

Target

f82faa84a52dccddd99ed590410194946fee0382fa530ea1e9e1c7c6d61eccc5.exe
Size

316KB
MD5

5b11a90d9fd630526fec9ab23ee7bd0f
SHA1

6430da55338bf465bdbd951ddaf7dc9a0e05b859
SHA256

f82faa84a52dccddd99ed590410194946fee0382fa530ea1e9e1c7c6d61eccc5
SHA512

739375021b85dcf7a1fabdd1a2de841c9e8f0f288822063b24be2fc7b4137581cf7907c845c0f055335eb816952fba8ba65db38aee30096398a11aec8008a3b9
SSDEEP

6144:5upVN8jK0ODTxGSz5cMJKn8nYEyTLwcJf6j3A4jLQAFiw:cpVN3FGS1JKe78wcYj3AC

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1672	1568	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\f82faa84a52dccddd99ed590410194946fee0382fa530ea1e9e1c7c6d61eccc5.exe
"C:\Users\Admin\AppData\Local\Temp\f82faa84a52dccddd99ed590410194946fee0382fa530ea1e9e1c7c6d61eccc5.exe"
1⤵
PID:1568
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 1164
  2⤵
  - Program crash
  PID:1672

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1568 -ip 1568
1⤵
PID:2888

memory/1568-1-0x0000000000770000-0x0000000000870000-memory.dmp

Filesize
1024KB

Download
memory/1568-2-0x0000000000700000-0x000000000074D000-memory.dmp

Filesize
308KB

Download
memory/1568-3-0x0000000000400000-0x0000000000458000-memory.dmp

Filesize
352KB

Download
memory/1568-4-0x0000000000400000-0x0000000000499000-memory.dmp

Filesize
612KB

Download
memory/1568-6-0x0000000000700000-0x000000000074D000-memory.dmp

Filesize
308KB

Download
memory/1568-5-0x0000000000400000-0x0000000000458000-memory.dmp

Filesize
352KB

Download