4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce

Analysis

max time kernel
197s
max time network
208s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:33

Target

4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe
Size

208KB
MD5

a24f2fe2cacb342a641056898e5966d0
SHA1

764d4b31a2c0f7ea7075534356a3ee0163e1871b
SHA256

4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce
SHA512

b9de43a39cee3c83090f4c821b7fcfee22a8f5cdefb43e072d679cfdadb8bc1f6315e3cc2a3a712dd223c4a86f50b28127e728c654c040da959e66bb0ff6dab4
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4612 4052 WerFault.exe 4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe

pid process

4052 4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe

pid	pid_target	process	target process
4612	4052	WerFault.exe	4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe

pid	process
4052	4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe

C:\Users\Admin\AppData\Local\Temp\4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe
"C:\Users\Admin\AppData\Local\Temp\4a64e5213a53734c0eac02e4335729c473c77a983d1ff5cc718dedb380c6e6ce.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4052

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4052 -s 464
2⤵
- Program crash
PID:4612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4052 -ip 4052
1⤵
PID:2796