f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76

Analysis

max time kernel
146s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
22-04-2024 23:42

Target

f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76.exe
Size

360KB
MD5

6542649e58a2e97fe06de33642854e06
SHA1

b296d92247e89f40c668e8b68c700d65322b0fb0
SHA256

f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76
SHA512

6e4b5dbcf7ed32ffe7987ae232ee98c03dbfcf812706f2359587dd0309ce51ba6513b324b1695a43cd65789370884ef69f0f7c4b6a40805003388e83670abbf5
SSDEEP

6144:NXs7on7EoGSCR37VfO/jSZud1nJbx5m3LwVs4l:N87m7sLVfO/0WJlgU7l

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4156 308 WerFault.exe f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76.exe

pid	pid_target	process	target process
4156	308	WerFault.exe	f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76.exe

C:\Users\Admin\AppData\Local\Temp\f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76.exe
"C:\Users\Admin\AppData\Local\Temp\f015857b4e046f44e4fdcd6a364096181258ec9419415b2de480b692c4f68e76.exe"
1⤵
PID:308
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 308 -s 1192
  2⤵
  - Program crash
  PID:4156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 308 -ip 308
1⤵
PID:1396

memory/308-1-0x0000000002DE0000-0x0000000002EE0000-memory.dmp

Filesize
1024KB

Download
memory/308-2-0x0000000003340000-0x000000000338B000-memory.dmp

Filesize
300KB

Download
memory/308-3-0x0000000000400000-0x0000000002C3D000-memory.dmp

Filesize
40.2MB

Download
memory/308-5-0x0000000003340000-0x000000000338B000-memory.dmp

Filesize
300KB

Download