0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
02/10/2022, 00:18

Target

0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4.exe
Size

32KB
MD5

6687c4083d5b492a8b5642f264d2b3d0
SHA1

d50bf1bdaaa0f51de00672d1a3989ba055f14984
SHA256

0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4
SHA512

85216017552289d8552d2ba42cce60877dc0d738d4b181fed4c87b25f51f1882dda6aa420eeb82ff4d648a2fa3e3d8557ac6a944e990d1a10e5b1b725da8dc75
SSDEEP

768:VtquN3rVg6MEv+t8U+JKirjT3Yxj0Jjm:Vtquxh/MEvesKirfYx6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3208	4928	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4928	0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4.exe

C:\Users\Admin\AppData\Local\Temp\0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4.exe
"C:\Users\Admin\AppData\Local\Temp\0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4928
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4928 -s 464
  2⤵
  - Program crash
  PID:3208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4928 -ip 4928
1⤵
PID:1836

memory/4928-134-0x0000000000710000-0x0000000000725000-memory.dmp

Filesize
84KB

Download
memory/4928-135-0x0000000000710000-0x0000000000725000-memory.dmp

Filesize
84KB

Download