db788bb84a5a2093a2d08bb62af87616f41b9074a18e4892b1c6a3208ea42112

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2022, 03:27

Target

db788bb84a5a2093a2d08bb62af87616f41b9074a18e4892b1c6a3208ea42112.exe
Size

304KB
MD5

6243346379f53a392d5acd5482030fd0
SHA1

ed15e44cb7a37eab059cec35e683f84a1e57b148
SHA256

db788bb84a5a2093a2d08bb62af87616f41b9074a18e4892b1c6a3208ea42112
SHA512

f991f516c8a5e57e47ccf8f859bff08cd15d88db16021b0446478dcbf06f3da63030d74c1038c7106c0363b31242c95a58570d1e9d735c2f996a30881e8d9657
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3080	3544	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3544	db788bb84a5a2093a2d08bb62af87616f41b9074a18e4892b1c6a3208ea42112.exe

C:\Users\Admin\AppData\Local\Temp\db788bb84a5a2093a2d08bb62af87616f41b9074a18e4892b1c6a3208ea42112.exe
"C:\Users\Admin\AppData\Local\Temp\db788bb84a5a2093a2d08bb62af87616f41b9074a18e4892b1c6a3208ea42112.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3544 -s 464
  2⤵
  - Program crash
  PID:3080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3544 -ip 3544
1⤵
PID:4068