a9ae5b9604cd638508a79ae09d1d97ae2209d191f9c323e14781dcd85faff3e8

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 11:13

Target

a9ae5b9604cd638508a79ae09d1d97ae2209d191f9c323e14781dcd85faff3e8.exe
Size

142KB
MD5

0c7d02781b6a434a081e0b6dfc8a43a2
SHA1

58e15ea8f33647634431ec080e063964159361de
SHA256

a9ae5b9604cd638508a79ae09d1d97ae2209d191f9c323e14781dcd85faff3e8
SHA512

4aa281a4bf9d43b31567f65e6f3a23ff9cdb1b3be109ad1b74effc87210405acfa76f5ca2060e3ddb51f72582d8deb21767255a439244607ac1cfa82c34207bf
SSDEEP

3072:K2ouiAofRcYNHMWZONBlR8B+v0wBpTMgkz/J+bo/:K2ocofSNWZwBQ+8wEgWJ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2568	4984	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4984	a9ae5b9604cd638508a79ae09d1d97ae2209d191f9c323e14781dcd85faff3e8.exe

C:\Users\Admin\AppData\Local\Temp\a9ae5b9604cd638508a79ae09d1d97ae2209d191f9c323e14781dcd85faff3e8.exe
"C:\Users\Admin\AppData\Local\Temp\a9ae5b9604cd638508a79ae09d1d97ae2209d191f9c323e14781dcd85faff3e8.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 428
  2⤵
  - Program crash
  PID:2568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4984 -ip 4984
1⤵
PID:2636