acb81e02df5e329568b5a61bbe51050396c13e16f72c0a7b458dedc23541bc0f

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12/03/2024, 02:53

Target

c245f1753137bae1f12598682a54704a.exe
Size

281KB
MD5

c245f1753137bae1f12598682a54704a
SHA1

eea0ee181fad24ec7c718b89f473e12f71c03322
SHA256

acb81e02df5e329568b5a61bbe51050396c13e16f72c0a7b458dedc23541bc0f
SHA512

7f789cebb038573b01070f079bcd5c967333189fbfb158cbdd72ecc0715be1a69dffcf399c86e42c0783b00282463868818674e557240b73fb81217418ed9f28
SSDEEP

6144:b4P9MUAX/g4jQS8Rn3Ex0+Mmt0k5WfVyVHglOLBOoy:b2+gWQSgwbMN+cyVHmOV7y

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1740	1936	WerFault.exe	87

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1936	c245f1753137bae1f12598682a54704a.exe

C:\Users\Admin\AppData\Local\Temp\c245f1753137bae1f12598682a54704a.exe
"C:\Users\Admin\AppData\Local\Temp\c245f1753137bae1f12598682a54704a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1936
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1936 -s 704
  2⤵
  - Program crash
  PID:1740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1936 -ip 1936
1⤵
PID:2656