ba73034351240956a10c4809c1122f30539c2494c97aff5b2688ff3c1a60329e

Analysis

max time kernel
163s
max time network
196s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2022, 04:07

Target

ba73034351240956a10c4809c1122f30539c2494c97aff5b2688ff3c1a60329e.exe
Size

224KB
MD5

46c978f6125a258e8bf1701dc974df40
SHA1

b9c9a2910e957c3506bad8b106a600d54074b8f6
SHA256

ba73034351240956a10c4809c1122f30539c2494c97aff5b2688ff3c1a60329e
SHA512

4d544809ff71492d488c4a5f0aa35e5b8bd3afb5e8075bca5e859d4c72b2e67e23a2dafc5fd16ae3c1e79f49ae559d9b54183aaef3f59eafedf8944b03dcad50
SSDEEP

3072:g5IIEkT/sIqrgl4iEzjKTF40qVA0KNBx9lDL:g5IxkT0IqrgCHpXA0KZ99

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2860	4684	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4684	ba73034351240956a10c4809c1122f30539c2494c97aff5b2688ff3c1a60329e.exe

C:\Users\Admin\AppData\Local\Temp\ba73034351240956a10c4809c1122f30539c2494c97aff5b2688ff3c1a60329e.exe
"C:\Users\Admin\AppData\Local\Temp\ba73034351240956a10c4809c1122f30539c2494c97aff5b2688ff3c1a60329e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4684
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 468
  2⤵
  - Program crash
  PID:2860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4684 -ip 4684
1⤵
PID:4444