de9576b67dca2f308dddff92b41e7013ce3c1e18407a40d257850ed494d71e71

Analysis

max time kernel
70s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2022 20:39

Target

de9576b67dca2f308dddff92b41e7013ce3c1e18407a40d257850ed494d71e71.exe
Size

248KB
MD5

694ff85502e0cd19dae5ad7d8e03f9e0
SHA1

2ea1084b2d03518cb97686e15e538e068c1c75dc
SHA256

de9576b67dca2f308dddff92b41e7013ce3c1e18407a40d257850ed494d71e71
SHA512

a2025a63c15a14e8a3950a8cc4e188e4024f950be524330bf654bfe2d0070788d720110d0577ea26511edcd5b65ae393bd0ec3898ffa7c7c3136f5bfec09df0e
SSDEEP

6144:ta5tv0z4TYzF2p1n11AgsXA90QOEzVJu91bIUprKoxeGY4Pc8daanUrhynDVBSh5:tabszRFq1n11AHXQOEzVJu91bIUprKoc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4664	4140	WerFault.exe	83

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4140	de9576b67dca2f308dddff92b41e7013ce3c1e18407a40d257850ed494d71e71.exe

C:\Users\Admin\AppData\Local\Temp\de9576b67dca2f308dddff92b41e7013ce3c1e18407a40d257850ed494d71e71.exe
"C:\Users\Admin\AppData\Local\Temp\de9576b67dca2f308dddff92b41e7013ce3c1e18407a40d257850ed494d71e71.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4140 -s 452
  2⤵
  - Program crash
  PID:4664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4140 -ip 4140
1⤵
PID:828