32c952d6d586565c629c76191dae9b363d32698a09dc2289058ea04c9c2633e1

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 10:33

Target

2256-1407-0x0000000000400000-0x000000000046C000-memory.exe
Size

432KB
MD5

6a02f21895451b3d3ec4bc07b17c0095
SHA1

3a5397fa738431792caca4f052d908dcfcf5b9b4
SHA256

32c952d6d586565c629c76191dae9b363d32698a09dc2289058ea04c9c2633e1
SHA512

c595e92e7193c3f173d7b584238626b7410fbae48126802486ed94ae584ffdcca24d7fe1af7c046758b0c02315060165dda87288794086409d431e556b7244d0
SSDEEP

6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGie/9o0wVEhKhFna:cuQRHexo0n24zVK32RRVmGiAwVbhR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4964 844 WerFault.exe 2256-1407-0x0000000000400000-0x000000000046C000-memory.exe

pid	pid_target	process	target process
4964	844	WerFault.exe	2256-1407-0x0000000000400000-0x000000000046C000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2256-1407-0x0000000000400000-0x000000000046C000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2256-1407-0x0000000000400000-0x000000000046C000-memory.exe"
1⤵
PID:844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 844 -s 216
2⤵
- Program crash
PID:4964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 844 -ip 844
1⤵
PID:1896