a1404c296d71af33298550b9a5bee86f970956f402c12c40d22bfc66cf95212f

Analysis

max time kernel
113s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
21-10-2022 01:12

Target

a1404c296d71af33298550b9a5bee86f970956f402c12c40d22bfc66cf95212f.exe
Size

216KB
MD5

74a67cb886255a72b917c5342c75ac62
SHA1

9f5675fee2cf69773575b54db1f662700bce0e39
SHA256

a1404c296d71af33298550b9a5bee86f970956f402c12c40d22bfc66cf95212f
SHA512

1d8b62f5d4204a7dfa6da55cdc9095b64fa5908602785971cc40624d6e8fa97071f86e0060725beaaf33dee5149ed02722bb85ca97d1fc16431ea91a931e656b
SSDEEP

768:/JwqZVkRWTFgzP9dCFjv00ZDqNgLY8yIMgGOGruDmR+TedPANEuAs+whvua1HDu7:/JyP9ds9V+qMSC/x

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4000	2432	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2432	a1404c296d71af33298550b9a5bee86f970956f402c12c40d22bfc66cf95212f.exe

C:\Users\Admin\AppData\Local\Temp\a1404c296d71af33298550b9a5bee86f970956f402c12c40d22bfc66cf95212f.exe
"C:\Users\Admin\AppData\Local\Temp\a1404c296d71af33298550b9a5bee86f970956f402c12c40d22bfc66cf95212f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2432
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2432 -s 1008
  2⤵
  - Program crash
  PID:4000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2432 -ip 2432
1⤵
PID:4668