1495915912a7392a880ee9171e053a5248fae9058959146ddc1a22f3dce3df20

Analysis

max time kernel
143s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2022, 03:04

Target

1495915912a7392a880ee9171e053a5248fae9058959146ddc1a22f3dce3df20.exe
Size

70KB
MD5

cf32688ff87671b8bbdff3e859c790f6
SHA1

b2eca549f5f5305c370fa803876ef8cdb0591c18
SHA256

1495915912a7392a880ee9171e053a5248fae9058959146ddc1a22f3dce3df20
SHA512

e0af16ab81d36b386a539102b24436b92965b4ec903575472a4e53188d5bfe5bc37f4ddde8371f7a41e62679d1d67a07ddaf964f08510bee9b7478963bfe5717
SSDEEP

1536:FamvSREOPirD7nKmwu0TxPJYBX8XS8R3VgTTAq+VYN:IRLYXnKmwu0QBX18cUEN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1300	2780	WerFault.exe	83

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2780	1495915912a7392a880ee9171e053a5248fae9058959146ddc1a22f3dce3df20.exe

C:\Users\Admin\AppData\Local\Temp\1495915912a7392a880ee9171e053a5248fae9058959146ddc1a22f3dce3df20.exe
"C:\Users\Admin\AppData\Local\Temp\1495915912a7392a880ee9171e053a5248fae9058959146ddc1a22f3dce3df20.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2780
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2780 -s 752
  2⤵
  - Program crash
  PID:1300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2780 -ip 2780
1⤵
PID:4360