52c666c663f7f89999a3c812b02f248dda0719c0b7d395ed600ed39622796b41

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2022 01:40

Target

52c666c663f7f89999a3c812b02f248dda0719c0b7d395ed600ed39622796b41.exe
Size

57KB
MD5

9129cdb8c68b6a3f46afa196faf56122
SHA1

b542bd01dbd060819bb11ba3ecdb2b7f3b7aef86
SHA256

52c666c663f7f89999a3c812b02f248dda0719c0b7d395ed600ed39622796b41
SHA512

a532138325f58672da2457fad5a4c2559377e568892dcbcb33e5f51ff71e410c59815ab5398a3019e1bcaea598f01796d813e1713596d06b86b142a097c378e2
SSDEEP

768:5bMPeN2LEt+HANMnBHRGbjyAnJErDV1rixHlVBkK:53WEcHANMnXGbjZnirDV1rixFoK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3832	232	WerFault.exe	67

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
232	52c666c663f7f89999a3c812b02f248dda0719c0b7d395ed600ed39622796b41.exe

C:\Users\Admin\AppData\Local\Temp\52c666c663f7f89999a3c812b02f248dda0719c0b7d395ed600ed39622796b41.exe
"C:\Users\Admin\AppData\Local\Temp\52c666c663f7f89999a3c812b02f248dda0719c0b7d395ed600ed39622796b41.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 232 -s 464
  2⤵
  - Program crash
  PID:3832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 232 -ip 232
1⤵
PID:3792