1f735fec89972516a465e60dc15509afe1a4a08878fffe90e802fd9771b94cf9

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
20/05/2024, 04:25

Target

1f735fec89972516a465e60dc15509afe1a4a08878fffe90e802fd9771b94cf9.exe
Size

284KB
MD5

4dc6a8b3480a5c707292bdff5f84f084
SHA1

c8e16766fc983eae81616b2aa4125d7f9dff3dbb
SHA256

1f735fec89972516a465e60dc15509afe1a4a08878fffe90e802fd9771b94cf9
SHA512

a9bef8c79bfe0881c4a43fa4763e17a5828b4cbe2b9ce67d9a5dcdddc6f58d72029da4c89da54f4bf08d6708b43dd13ee3fea8dad0fd914d9f1b8716c095ebc1
SSDEEP

3072:Xu1r0c/QNlENUlG1xyxFZpzBCajL20U6Sdv7tl3DEVpSn2aMfONfzB5z:+Z0LNldlU85p8iqt5lzGM2ANfzv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
656	2928	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1f735fec89972516a465e60dc15509afe1a4a08878fffe90e802fd9771b94cf9.exe
"C:\Users\Admin\AppData\Local\Temp\1f735fec89972516a465e60dc15509afe1a4a08878fffe90e802fd9771b94cf9.exe"
1⤵
PID:2928
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2928 -s 400
  2⤵
  - Program crash
  PID:656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2928 -ip 2928
1⤵
PID:228

memory/2928-3-0x0000000000400000-0x0000000000458000-memory.dmp

Filesize
352KB

Download
memory/2928-2-0x0000000003CA0000-0x0000000003CED000-memory.dmp

Filesize
308KB

Download
memory/2928-1-0x00000000020B0000-0x00000000021B0000-memory.dmp

Filesize
1024KB

Download
memory/2928-5-0x0000000000400000-0x0000000000458000-memory.dmp

Filesize
352KB

Download
memory/2928-4-0x0000000000400000-0x0000000001F92000-memory.dmp

Filesize
27.6MB

Download