7af28c61d8e3a8a360713732fea2decdde5ad8e178074da4876c803723e68a72

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 04:38

Target
7af28c61d8e3a8a360713732fea2decdde5ad8e178074da4876c803723e68a72.exe
Size 5.6MB
Sample260805-e9h4pade87
SHA256 7af28c61d8e3a8a360713732fea2decdde5ad8e178074da4876c803723e68a72
MD5 5b4dea6752ad4e29e2be9ced002e83c2
SHA1 f4f03dd8f881e6f311b9749d5f159252fbd844ae
SHA512 36e13e3de63b4a4a51864cda4a8fd40abd641fce7cbb3268f97d34dfcc5eb9b348f4833b137390141fa1df688576cd46740b06e90a0a47916febff098a00005c
SSDEEP 98304:pe2uiOIIkG4xvgZgBx4XnXVK3XIhffyosK5f7bM7t:puiOIzLvgZgB2K3YBfDsKdbWt
TLSH
T1BE56C043FB8282B2E69101B011B79B7B5F395D3897348BC7D7D029669C312E22A3F759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4764-0-0x00000000007F0000-0x0000000000D95000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4180	4764	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\7af28c61d8e3a8a360713732fea2decdde5ad8e178074da4876c803723e68a72.exe
"C:\Users\Admin\AppData\Local\Temp\7af28c61d8e3a8a360713732fea2decdde5ad8e178074da4876c803723e68a72.exe"
1⤵
PID:4764
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4764 -s 228
  2⤵
  - Program crash
  PID:4180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4764 -ip 4764
1⤵
PID:1252

memory/4764-0-0x00000000007F0000-0x0000000000D95000-memory.dmp

Download