b147eafafafd6266a868d5c9797ad79cf570b8394e6e5a0a634002a06ff1369c

Analysis

max time kernel
103s
max time network
104s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
19/04/2025, 14:20

Target

8792-17575-0x0000000000B70000-0x0000000000EAC000-memory.exe
Size

3.2MB
MD5

2c3271b986359ae546841d2fdfdd2c80
SHA1

d0325b9509242a9d6550f5b1a40e7f965ede4f84
SHA256

b147eafafafd6266a868d5c9797ad79cf570b8394e6e5a0a634002a06ff1369c
SHA512

626c7a5cc614d7d859f27ee04ef9d82e1529a03c4e3e6c8c9d16105d4c2206c64865738d56e605f5290dcb4dc5fe3d997592e8cb6e6fad88bf9c656303cc4b51
SSDEEP

49152:rEpSkeIml6Ow91xIOzzoMAzU0mdBdo+6WuDayPlr/NUJ:rwmEOqIOik

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1460	5832	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\8792-17575-0x0000000000B70000-0x0000000000EAC000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\8792-17575-0x0000000000B70000-0x0000000000EAC000-memory.exe"
1⤵
PID:5832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5832 -s 8
  2⤵
  - Program crash
  PID:1460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5832 -ip 5832
1⤵
PID:2344