e786657b60fd2e38e0015bf4b88302f58856b01ebd16433c0984b5643c2a7b44

Analysis

max time kernel
101s
max time network
104s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
23/04/2025, 11:52

Target

4748-20-0x0000000000400000-0x0000000000442000-memory.exe
Size

264KB
MD5

d46f12f43ab37a8918a51769a0286465
SHA1

3c0f1b4f3737ff43b08afc88d00e78f52da051e4
SHA256

e786657b60fd2e38e0015bf4b88302f58856b01ebd16433c0984b5643c2a7b44
SHA512

5d9f67296c86602cb2b60710417968e9a0a134d12c2e30c82b4f524cc283b14f0a59d1f0e7eec2c473b62ada3c77fbcea5d2e50d5e3980948021e7ecaff46c44
SSDEEP

3072:Mtkox8TLm6eqIJvcg9hTf/mN++9uXF6595u3rPxvXz:MtkoxcLm6eqIJvl9xfy++8XFd3rPZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2808	2044	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\4748-20-0x0000000000400000-0x0000000000442000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\4748-20-0x0000000000400000-0x0000000000442000-memory.exe"
1⤵
PID:2044
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2044 -s 8
  2⤵
  - Program crash
  PID:2808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2044 -ip 2044
1⤵
PID:3220