ac64755a649c087492d362a7706344ae5d744f439905bbe4e2e08ee807a70904

Analysis

max time kernel
91s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 02:12

Target

ac64755a649c087492d362a7706344ae5d744f439905bbe4e2e08ee807a70904.exe
Size

20KB
MD5

456940ca7267036dbc0499afffc9adfc
SHA1

af05dba6fa5f634301359ceba4e688945a38fd27
SHA256

ac64755a649c087492d362a7706344ae5d744f439905bbe4e2e08ee807a70904
SHA512

741be45e3310cf3346461a38c009b53f3de6bb936ff11e9842dea39e49b491daca78b5a5d192f774d0bef9591683c5c63a209acd7512948d57dd593b44a0f289
SSDEEP

384:cWSe09fiod4is39tAgrtGWp22v3rAjuRH:Ti9fXd4xPprtGA22v38juJ

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4976	4284	WerFault.exe	78
2208	4284	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\ac64755a649c087492d362a7706344ae5d744f439905bbe4e2e08ee807a70904.exe
"C:\Users\Admin\AppData\Local\Temp\ac64755a649c087492d362a7706344ae5d744f439905bbe4e2e08ee807a70904.exe"
1⤵
PID:4284
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 252
  2⤵
  - Program crash
  PID:4976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 284
  2⤵
  - Program crash
  PID:2208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4284 -ip 4284
1⤵
PID:5044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 4284 -ip 4284
1⤵
PID:2344

memory/4284-132-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/4284-133-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download