e8ab8b9f137612c17877e2c8f0852a16b363d25a0982f864c217667e6c07d31a

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 19:05

Target

e8ab8b9f137612c17877e2c8f0852a16b363d25a0982f864c217667e6c07d31a.exe
Size

49KB
MD5

8461ced81c596ad8e8e5158c4b001d00
SHA1

09005a9d13212b88f4ae27bc870d5c546060b27f
SHA256

e8ab8b9f137612c17877e2c8f0852a16b363d25a0982f864c217667e6c07d31a
SHA512

e917bb658cea9967b649175cd0a39f9639cf482878a4abe78805c7a9b9a0cb1f7f617b5f5039883c40c258113d5626b9bbbae99cef38cd782d3bcd0735209b21
SSDEEP

768:rjAPMl/TWXMqTvviaqWi2PLt+Oyac/7k:rUPMlCXMqTvv/TtPA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4612	4896	WerFault.exe	43

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4896	e8ab8b9f137612c17877e2c8f0852a16b363d25a0982f864c217667e6c07d31a.exe

C:\Users\Admin\AppData\Local\Temp\e8ab8b9f137612c17877e2c8f0852a16b363d25a0982f864c217667e6c07d31a.exe
"C:\Users\Admin\AppData\Local\Temp\e8ab8b9f137612c17877e2c8f0852a16b363d25a0982f864c217667e6c07d31a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4896
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4896 -s 660
  2⤵
  - Program crash
  PID:4612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4896 -ip 4896
1⤵
PID:2296