ff29923119e955dc28b21a54fac9bd8ce58419387bcb31a7ec00b19ef9211add

Analysis

max time kernel
136s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 21:36

Target

ff29923119e955dc28b21a54fac9bd8ce58419387bcb31a7ec00b19ef9211add.exe
Size

208KB
MD5

09e856c34f6ce0cdd759c819a1189140
SHA1

5bbf1d9681d2e9ced6a04afc84dbc8b146096320
SHA256

ff29923119e955dc28b21a54fac9bd8ce58419387bcb31a7ec00b19ef9211add
SHA512

b4eeaa52fcf8d7d489b73bcab7436e256ba6f51dcd2558ce70b241feba88c10081b0c7ea290ae14612c4108fd7ab6f8f8464e09ac3a0d21470fb1f05b5e70f8d
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4544	3888	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3888	ff29923119e955dc28b21a54fac9bd8ce58419387bcb31a7ec00b19ef9211add.exe

C:\Users\Admin\AppData\Local\Temp\ff29923119e955dc28b21a54fac9bd8ce58419387bcb31a7ec00b19ef9211add.exe
"C:\Users\Admin\AppData\Local\Temp\ff29923119e955dc28b21a54fac9bd8ce58419387bcb31a7ec00b19ef9211add.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3888
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3888 -s 468
  2⤵
  - Program crash
  PID:4544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3888 -ip 3888
1⤵
PID:4896