414d797cab0bd691fb3dd24064334d2cccee96b414a61ef315e7cb5fe0d76de2

Analysis

max time kernel
143s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2023 02:51

Target

4df4f01e169cd7b5ecae33e5d59fd5fe.exe
Size

200KB
MD5

4df4f01e169cd7b5ecae33e5d59fd5fe
SHA1

d1b1899ccd5afb5c501bd5384ab35af9cbe7edf4
SHA256

414d797cab0bd691fb3dd24064334d2cccee96b414a61ef315e7cb5fe0d76de2
SHA512

a0b994e858ffd5f8e44651d94af3461b149ef325732d24fed595b25cbd0711627dd3353ee87895d5dc23889ed4d89cf0636a085692e657d529054b0d19204d3b
SSDEEP

3072:Y69S8Z8jprujIivwslnsn9+JuJbfoL2wVHTZhQTWVyc+LpfJQlKTCC4H:19Swvwslnsn9+JuJbfoL2wVH9eI+NJcH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3188	4776	WerFault.exe	14

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4776	4df4f01e169cd7b5ecae33e5d59fd5fe.exe

C:\Users\Admin\AppData\Local\Temp\4df4f01e169cd7b5ecae33e5d59fd5fe.exe
"C:\Users\Admin\AppData\Local\Temp\4df4f01e169cd7b5ecae33e5d59fd5fe.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4776
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4776 -s 472
  2⤵
  - Program crash
  PID:3188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4776 -ip 4776
1⤵
PID:3180

memory/4776-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/4776-2-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download