cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 22:15

Target

cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af.exe
Size

297KB
MD5

756edde9287f6a62d10151ccaaec1b30
SHA1

d43b7217ae1ea47995fdd82e1ff06a1e8ff216db
SHA256

cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af
SHA512

3b76dac57f0750b1931ccdbb14197e10bf12c7841fc277505a7a8d9f94a688033c0973f2e41d2340297ed5b76ebbd3ad4f492256ba6b4bb215bb8d015d3933d7
SSDEEP

6144:/hMCBNn9AbOjw3ZeT/c3oSpsxi1sAzhay:5nNn9+xJI/JSpsxi1xhZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3212	4368	WerFault.exe	76

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4368	cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af.exe

C:\Users\Admin\AppData\Local\Temp\cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af.exe
"C:\Users\Admin\AppData\Local\Temp\cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4368
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4368 -s 500
  2⤵
  - Program crash
  PID:3212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4368 -ip 4368
1⤵
PID:4220