a448d3517a18f7e76d1f3fb3cc3548c0d0e45ce275a26065d1d6676face57c3d

Analysis

max time kernel
164s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 16:08

Target

a448d3517a18f7e76d1f3fb3cc3548c0d0e45ce275a26065d1d6676face57c3d.exe
Size

160KB
MD5

06b1e92cb285460afb3cb7452caa6821
SHA1

e97c76bb84dfeb8dc1d8e4c906816ca6bb4cb1cf
SHA256

a448d3517a18f7e76d1f3fb3cc3548c0d0e45ce275a26065d1d6676face57c3d
SHA512

3772073e7406003ae7639de0d82f20ce6411d23df4d315532e21ed7bc4f9d993aa7e1b1ce43bbdb783972ea4e141bce1d7986b584ef255a439582d8bcbaef293
SSDEEP

1536:3+gDbKlmyJKz5jR7766dxocisPfDsCUjhe+SPBp9oEoTTLgY++++1sY+++++ZDdM:3xbkuVbvLn7Uj3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4952	3132	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3132	a448d3517a18f7e76d1f3fb3cc3548c0d0e45ce275a26065d1d6676face57c3d.exe

C:\Users\Admin\AppData\Local\Temp\a448d3517a18f7e76d1f3fb3cc3548c0d0e45ce275a26065d1d6676face57c3d.exe
"C:\Users\Admin\AppData\Local\Temp\a448d3517a18f7e76d1f3fb3cc3548c0d0e45ce275a26065d1d6676face57c3d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3132
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3132 -s 468
  2⤵
  - Program crash
  PID:4952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 3132 -ip 3132
1⤵
PID:3708