6b4029cd65a9e9599031266d551f72c7258c14e11defc998c9fca312c294d017

Analysis

max time kernel
88s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2022 10:18

Target

6b4029cd65a9e9599031266d551f72c7258c14e11defc998c9fca312c294d017.exe
Size

196KB
MD5

1985767ad3f3c1753f2514fe8e24007e
SHA1

0a5ff3eec12b2d884aeb0f601c133f1000e13b31
SHA256

6b4029cd65a9e9599031266d551f72c7258c14e11defc998c9fca312c294d017
SHA512

3125da70e0721005c422dadfd2eae715f5986e0dcd2ea88d474410aec0960e855960261b6a2a846ae483e4c8a1b74c065967467beb307ab13b6b5d100dc2678e
SSDEEP

6144:T3aBGHSU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppQ7y:T32Pr7FXlbWc3PuV/r+XUf39GZjJ21Oe

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5064	4124	WerFault.exe	84

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4124	6b4029cd65a9e9599031266d551f72c7258c14e11defc998c9fca312c294d017.exe

C:\Users\Admin\AppData\Local\Temp\6b4029cd65a9e9599031266d551f72c7258c14e11defc998c9fca312c294d017.exe
"C:\Users\Admin\AppData\Local\Temp\6b4029cd65a9e9599031266d551f72c7258c14e11defc998c9fca312c294d017.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4124
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4124 -s 468
  2⤵
  - Program crash
  PID:5064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4124 -ip 4124
1⤵
PID:3524