ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
23-04-2024 02:19

Target

ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe
Size

324KB
MD5

1da9d5eb17a25c1dcd2d7028867904aa
SHA1

b75ab89bcf8306b9ef6d222478a004aba32ecd7f
SHA256

ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac
SHA512

68b49d817d381fdd4d108f9b86c8aeb4a743000247878412c30d671be78d9eb3c019db62a4cc61f207e556389b9b3ff012f1e4c77d822ea42132f6aa292a94d2
SSDEEP

6144:cvhFCYZdP5aHNn1s7C+3S4R5wQrV/YbZwZ3ssu4eqswN8s1Pf4NAGy5uRyXR6P+R:TQdwHNn1OCN4MQEZwUqsA

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1432 824 WerFault.exe ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe

pid process

824 ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe

pid	pid_target	process	target process
1432	824	WerFault.exe	ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe

pid	process
824	ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe

C:\Users\Admin\AppData\Local\Temp\ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe
"C:\Users\Admin\AppData\Local\Temp\ac1f09d0a797d231ac40d98c74851efbb1325d8c6351ddc251e0369c2f20c0ac.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 824 -s 464
2⤵
- Program crash
PID:1432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 824 -ip 824
1⤵
PID:3668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3740 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
1⤵
PID:3740

memory/824-2-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download
memory/824-3-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download
memory/824-4-0x0000000000400000-0x0000000000453000-memory.dmp

Filesize
332KB

Download