8a4c1df1ac7b6cdf15fdade5e197d59b0ee4c781c5028111c3901b30fc8f79a8

Analysis

max time kernel
137s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2022, 14:56

Target

8a4c1df1ac7b6cdf15fdade5e197d59b0ee4c781c5028111c3901b30fc8f79a8.exe
Size

107KB
MD5

53c6be20fb600488a5cd27fd7889d8a0
SHA1

6e45ad788ab78a163ff0c703b2978d9b172b9447
SHA256

8a4c1df1ac7b6cdf15fdade5e197d59b0ee4c781c5028111c3901b30fc8f79a8
SHA512

5e412c93479d3ba3512362d7bb654f5d1f2a516f9d2b42dde2769e43de052979caae93fee52cda8ab70180141a83426abd90948b9a3ad2f25faaa603c42c82ad
SSDEEP

1536:1PHPU4oh4BGCSer10tmisnifh4Vdnr0Ru9D8vujqHJM7f70/tF5Ug+QZspt:1Pvhrhr1mmzr0Ruy75UKWf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3440	668	WerFault.exe	83

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
668	8a4c1df1ac7b6cdf15fdade5e197d59b0ee4c781c5028111c3901b30fc8f79a8.exe

C:\Users\Admin\AppData\Local\Temp\8a4c1df1ac7b6cdf15fdade5e197d59b0ee4c781c5028111c3901b30fc8f79a8.exe
"C:\Users\Admin\AppData\Local\Temp\8a4c1df1ac7b6cdf15fdade5e197d59b0ee4c781c5028111c3901b30fc8f79a8.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:668
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 668 -s 508
  2⤵
  - Program crash
  PID:3440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 668 -ip 668
1⤵
PID:4884