c4a5eae83cf7b2a5b1e84daa9e199e0ff76cc0a19a09f18d2c33907125894b7d

Analysis

max time kernel
32s
max time network
2s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
21-10-2022 02:12

Target

c4a5eae83cf7b2a5b1e84daa9e199e0ff76cc0a19a09f18d2c33907125894b7d.exe
Size

91KB
MD5

72b5d799579e0fd0e3607860e8edd0e0
SHA1

e9503c4f1870e647eb5e68bfc644f5556cd5ca6f
SHA256

c4a5eae83cf7b2a5b1e84daa9e199e0ff76cc0a19a09f18d2c33907125894b7d
SHA512

ab3d2b9bd57ae1c39df495a38cf43d6394671ac699fc54812c5c806daac7566a43185aa71abd4d243a15e4fdae5675616b0b4a18ac3c36ddfa39735609879f9c
SSDEEP

768:JN8LQfqe0yKWLOe3v/Gq73/7y4P6upQ97PtBRDtO7EuonLFR3ysISlJxjC4E5:JNXF0yKfe+a3/7y4fE5zxvLtlJZn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4848	1828	WerFault.exe	76

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1828	c4a5eae83cf7b2a5b1e84daa9e199e0ff76cc0a19a09f18d2c33907125894b7d.exe

C:\Users\Admin\AppData\Local\Temp\c4a5eae83cf7b2a5b1e84daa9e199e0ff76cc0a19a09f18d2c33907125894b7d.exe
"C:\Users\Admin\AppData\Local\Temp\c4a5eae83cf7b2a5b1e84daa9e199e0ff76cc0a19a09f18d2c33907125894b7d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1828
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1828 -s 500
  2⤵
  - Program crash
  PID:4848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1828 -ip 1828
1⤵
PID:4212