8f7ad72391969e7af5ff686362d2b268a6ecca3e3d0a26f6e9b1991f64242438

Analysis

max time kernel
122s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2022 13:34

Target

8f7ad72391969e7af5ff686362d2b268a6ecca3e3d0a26f6e9b1991f64242438.exe
Size

18KB
MD5

d872896fcf2642ca367d15248ed2c7ff
SHA1

56834ac7b9b70ea53a14df4272d183f9902bced8
SHA256

8f7ad72391969e7af5ff686362d2b268a6ecca3e3d0a26f6e9b1991f64242438
SHA512

88d11b8c5b5a7cc41ec6fe1a4fb80c03581c96c6873f07725aeabff6cc18af7f8eee090b71eb3e61cf8221e892869527c173abf29f8dddc29cc983c5cd82fc39
SSDEEP

192:zez/nvyVmNjjQ2tsk45/aujn+5aWk6jOUpYYMjOUpYY:cOkNe/m53XprSXpr

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4848	3700	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3700	8f7ad72391969e7af5ff686362d2b268a6ecca3e3d0a26f6e9b1991f64242438.exe

C:\Users\Admin\AppData\Local\Temp\8f7ad72391969e7af5ff686362d2b268a6ecca3e3d0a26f6e9b1991f64242438.exe
"C:\Users\Admin\AppData\Local\Temp\8f7ad72391969e7af5ff686362d2b268a6ecca3e3d0a26f6e9b1991f64242438.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3700
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3700 -s 464
  2⤵
  - Program crash
  PID:4848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3700 -ip 3700
1⤵
PID:3300