97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2022, 14:31

Target

97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b.exe
Size

72KB
MD5

6a66342fc974b506d4316fd56b2c3d60
SHA1

144fc7eab428173a2488dcafc72749c4cf6123aa
SHA256

97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b
SHA512

88e245cb8418d888167a5545762b9617f3022804e2292f2396e61dc4b8c178891e56ebb03dfbf2680a335dd4fad1c6181444b548b7018331208566047b5e8bb7
SSDEEP

1536:ZphbisPfQAaBLsNlP0ufZxKKKKKKKKKRL:pdPYoPjfZU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
908	3404	WerFault.exe	72

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3404	97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b.exe

C:\Users\Admin\AppData\Local\Temp\97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b.exe
"C:\Users\Admin\AppData\Local\Temp\97cfd4090d84b9ec08d5daec2da0c539249ba2ba226e45e060a596e0dacc897b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3404
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3404 -s 668
  2⤵
  - Program crash
  PID:908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3404 -ip 3404
1⤵
PID:1832