998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab

Analysis

max time kernel
91s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2022, 01:39

Target

998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab.exe
Size

684KB
MD5

0180e63f91af5370cb57b50c6e9dc7e0
SHA1

32675b556e8843eb2ba2964c6bbf251c3eefe8fd
SHA256

998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab
SHA512

d9933bfeda84d8b6fc865a2726fa508d147dbf5f606833f1a684073bca2a596cf4b1ae88dd265163947b0e679b96eb601eccd5ec86543ddd9b4031a5808e8033
SSDEEP

6144:1CYwO2yBPGNDl8zoFE+VA8Jl/z1SAAoQ32YD1cvmBoeq7LnWl/6VAmONUGdqjNfM:1CYwO28+Nwl4A8Jl/J4WwoeqmgAnNwNO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2720	4940	WerFault.exe	81

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4940	998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab.exe
4940	998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab.exe

C:\Users\Admin\AppData\Local\Temp\998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab.exe
"C:\Users\Admin\AppData\Local\Temp\998774156b8bd600cb4a6b3810539ed837a9681f7ac419eaffcf0d179b3709ab.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4940
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 816
  2⤵
  - Program crash
  PID:2720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4940 -ip 4940
1⤵
PID:3784