7161460f15ece043f47e149f2540e467d3dc5ebc08297fa040c456b63efa9e00

Analysis

max time kernel
101s
max time network
105s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
22/04/2025, 21:59

Target

2820-11-0x0000000000400000-0x000000000043C000-memory.exe
Size

240KB
MD5

f580033bac18d09c9b89851b8a6c08fb
SHA1

a6f97af5f32f888c08105b91ae2081022dd45640
SHA256

7161460f15ece043f47e149f2540e467d3dc5ebc08297fa040c456b63efa9e00
SHA512

eb78dbfcb53d4ce7de4a6ce6e97d37c1bf24feb05ecca8e53dd1b9802b636b3b4a26fb796cf97dc96ec0724dd9991a61fcc5e8c536ad27b3a966d7dc0b50936c
SSDEEP

3072:pGWHJanqIldjoJZAnUCfxvicV1Y4WWQeBYWE9cT2XikgBcwkB0iOTJtDymw:pcjIiUBa1CkS9yk5wEyvDy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4392	5372	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2820-11-0x0000000000400000-0x000000000043C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2820-11-0x0000000000400000-0x000000000043C000-memory.exe"
1⤵
PID:5372
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5372 -s 8
  2⤵
  - Program crash
  PID:4392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5372 -ip 5372
1⤵
PID:2556