8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14

Analysis

max time kernel
147s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
19-04-2024 19:13

Target

8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14.exe
Size

414KB
MD5

4a6481f75a90dc2afd531c91afb5be68
SHA1

59d73658150e32cdddf562e23cca08d747333f06
SHA256

8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14
SHA512

f204841c937460336641c3627c4c2ec2f977d25dcf2d3158da209f3f9d7b3cd0cdf1eacee633fb9e5c9117e72e24433c736ecf51be92dcdd280625b2ebab5cb0
SSDEEP

6144:RgNPoTkniME5KY7yeLJlsbePScjTKvO3cZDBk3:RgNPLniMEUYxX8iScyW3cZDBM

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2644 2320 WerFault.exe 8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14.exe

pid	pid_target	process	target process
2644	2320	WerFault.exe	8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14.exe

C:\Users\Admin\AppData\Local\Temp\8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14.exe
"C:\Users\Admin\AppData\Local\Temp\8bbe1dd7cf20f807e3d903a1b5f02f8eff44f08c4ef4bbf562cb7b5f8a0c3f14.exe"
1⤵
PID:2320
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2320 -s 1280
  2⤵
  - Program crash
  PID:2644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2320 -ip 2320
1⤵
PID:1948

memory/2320-1-0x0000000001C50000-0x0000000001D50000-memory.dmp

Filesize
1024KB

Download
memory/2320-2-0x00000000038C0000-0x000000000390E000-memory.dmp

Filesize
312KB

Download
memory/2320-3-0x0000000000400000-0x0000000001A32000-memory.dmp

Filesize
22.2MB

Download
memory/2320-4-0x0000000000400000-0x0000000001A32000-memory.dmp

Filesize
22.2MB

Download
memory/2320-5-0x00000000038C0000-0x000000000390E000-memory.dmp

Filesize
312KB

Download