f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d

Analysis

max time kernel
142s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
31/08/2023, 21:45

Target

f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d.exe
Size

2.5MB
MD5

d84376ceb358ef57de940f2230b55051
SHA1

cb724e78636f91c16c7e6171c0d2a98e870a8a53
SHA256

f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d
SHA512

a98ff4a768c786ff1f6ba314adb50cf7fc40fc702d53d2386cab8680f64510af6a0657272d31c06f1a972b300049ac69982f8c2b447a7c003d9b30a93072252e
SSDEEP

49152:FapER4iLvsQYhZj3Fn+s8KuqGaX0ToIBAUZLYZzL:qECiL0fhZmJBAUZLSL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1940	3260	WerFault.exe	81

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3260	f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d.exe
3260	f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d.exe

C:\Users\Admin\AppData\Local\Temp\f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d.exe
"C:\Users\Admin\AppData\Local\Temp\f819fb321a8db1378836c3f1f31f9b76e618ecf48bafcbe8808998460ecdf79d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3260
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3260 -s 696
  2⤵
  - Program crash
  PID:1940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3260 -ip 3260
1⤵
PID:2816