5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef

Analysis

max time kernel
184s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 16:19

Target

5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef.exe
Size

883KB
MD5

4d5ed8ccdbb3ee6aaf7ab5a1b62ed621
SHA1

1516452009fb8e4eb9013053177b3704bf9b1a21
SHA256

5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef
SHA512

473d60e9b3e534db3d6bbf645f8f6edd92ca320e3de7de887a00ba85650bd2bfac0489a857b366766324eb5c9a4966cd3c5af5467571362eff851093881a3655
SSDEEP

12288:UfSiwACvLjBu7NzzZ11iyIfQyY0YjDg4WQqhUaJAgVwuWcnL9JxKQ23gx:UcAgw7Nzz0yIfRY0g+F6rdML9JxKQEgx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1472	696	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
696	5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef.exe

C:\Users\Admin\AppData\Local\Temp\5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef.exe
"C:\Users\Admin\AppData\Local\Temp\5ece942d408c6a8d952f8e2a44c27ed06f70507e9799504b46729905e1df85ef.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:696
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 696 -s 464
  2⤵
  - Program crash
  PID:1472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 696 -ip 696
1⤵
PID:5016