82a9f2a22d1888e0e70646f88ac65a5df8dad5b29fffc40646f168c4646b9876

Analysis

max time kernel
137s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 06:52

Target

82a9f2a22d1888e0e70646f88ac65a5df8dad5b29fffc40646f168c4646b9876.exe
Size

60KB
MD5

4f66554ad401e6c468c91ab076a78120
SHA1

7e943a5bf8c7cc2cd05f424f7daf653826666a11
SHA256

82a9f2a22d1888e0e70646f88ac65a5df8dad5b29fffc40646f168c4646b9876
SHA512

a196bd0d2a234b0b7f24836d671a53dddb3b98faafe8022ef867939fcfb7886209fc3f871b7b91b4ad3ea72f6e53dd5401b34a8a90245bf45577c0533c77ad14
SSDEEP

768:roelqktSHeQi/XLORrc+1MHsGBA79wx9FTmcJJMVa:HAkQiORrYS79wx1DME

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4732	2412	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2412	82a9f2a22d1888e0e70646f88ac65a5df8dad5b29fffc40646f168c4646b9876.exe

C:\Users\Admin\AppData\Local\Temp\82a9f2a22d1888e0e70646f88ac65a5df8dad5b29fffc40646f168c4646b9876.exe
"C:\Users\Admin\AppData\Local\Temp\82a9f2a22d1888e0e70646f88ac65a5df8dad5b29fffc40646f168c4646b9876.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2412
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 496
  2⤵
  - Program crash
  PID:4732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2412 -ip 2412
1⤵
PID:3484