b4cf374ac26841148bb7c561fea17a9819b8fdd7e3765a9d89134e58e7a78fa7

Analysis

max time kernel
153s
max time network
174s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2022 23:26

Target

b4cf374ac26841148bb7c561fea17a9819b8fdd7e3765a9d89134e58e7a78fa7.exe
Size

148KB
MD5

fff3cd75d71dd115006cdc29184233d7
SHA1

71362661927a9e1cbab2adc9969a61caaee1af1c
SHA256

b4cf374ac26841148bb7c561fea17a9819b8fdd7e3765a9d89134e58e7a78fa7
SHA512

9cb97c35f34519f34e109ecade8412e89884a505e86781a4ca6ea30a2e6b32c0aa2dce0c8bea27998f6a1c4b4d92319a045f718e1f2b51d6320d3391d8485c5d
SSDEEP

3072:CfD+WuMBspr8+k77/pswWR/x0+dv4TLxyK454oQZiEInO9:USWuMBsFvS04+dv4TVSWyg

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	4176	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4176	b4cf374ac26841148bb7c561fea17a9819b8fdd7e3765a9d89134e58e7a78fa7.exe

C:\Users\Admin\AppData\Local\Temp\b4cf374ac26841148bb7c561fea17a9819b8fdd7e3765a9d89134e58e7a78fa7.exe
"C:\Users\Admin\AppData\Local\Temp\b4cf374ac26841148bb7c561fea17a9819b8fdd7e3765a9d89134e58e7a78fa7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4176 -s 472
  2⤵
  - Program crash
  PID:2316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4176 -ip 4176
1⤵
PID:4648