6ee7a986e0ee229a77e6c7d6e1884c56e0caf59ba9dc3fcf5591cdde61c2a2a3

Analysis

max time kernel
134s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 22:01

Target

6ee7a986e0ee229a77e6c7d6e1884c56e0caf59ba9dc3fcf5591cdde61c2a2a3.exe
Size

47KB
MD5

2bb7aa94e20b435df2417b3072b9e010
SHA1

9beaa4b08dd606aadc68201ebcf61c5b4e8c53cf
SHA256

6ee7a986e0ee229a77e6c7d6e1884c56e0caf59ba9dc3fcf5591cdde61c2a2a3
SHA512

a664e4fbc67685c3ead9d7558d79691ed11fabf8ffe04b6947ebbec6c9db3ed6a727f05c35bd9c89d15be1dce092d83e708d6d471f2ede7f423d8a9345ea757a
SSDEEP

768:LW3As34QfeW5Izoxrtr1J1wwH+Oyac/7k:L2AsoQfeW5IzoLHPA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4136	4720	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4720	6ee7a986e0ee229a77e6c7d6e1884c56e0caf59ba9dc3fcf5591cdde61c2a2a3.exe

C:\Users\Admin\AppData\Local\Temp\6ee7a986e0ee229a77e6c7d6e1884c56e0caf59ba9dc3fcf5591cdde61c2a2a3.exe
"C:\Users\Admin\AppData\Local\Temp\6ee7a986e0ee229a77e6c7d6e1884c56e0caf59ba9dc3fcf5591cdde61c2a2a3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4720
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4720 -s 672
  2⤵
  - Program crash
  PID:4136

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4720 -ip 4720
1⤵
PID:4612