e860d016b5fc7d02fa464120bc7bb7f1e5f9490dfe454f6f8627406ef23c35fc

Analysis

max time kernel
70s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2022, 14:57

Target

e860d016b5fc7d02fa464120bc7bb7f1e5f9490dfe454f6f8627406ef23c35fc.exe
Size

26KB
MD5

63650205bf9b95285bb4561fd3d83eb0
SHA1

100aa4ffdc185e71263f043451e28a4f3e032d46
SHA256

e860d016b5fc7d02fa464120bc7bb7f1e5f9490dfe454f6f8627406ef23c35fc
SHA512

e898f249b807b80192fde645717b63a421c4fcc5a9d7c371ce65401d0df2eaf97eb59f1540942770f26618f6e65793e18dce3e90366a8fd6337052377cbdab0f
SSDEEP

384:ZdIdW1fiGstXWKuG4mEOEEvXEIp6u7pxqiePgl9ffwQRu6wLx0Fq9:ZdIdW1vsFbZp626OAQ1wLx0Fq9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4084	3412	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3412	e860d016b5fc7d02fa464120bc7bb7f1e5f9490dfe454f6f8627406ef23c35fc.exe

C:\Users\Admin\AppData\Local\Temp\e860d016b5fc7d02fa464120bc7bb7f1e5f9490dfe454f6f8627406ef23c35fc.exe
"C:\Users\Admin\AppData\Local\Temp\e860d016b5fc7d02fa464120bc7bb7f1e5f9490dfe454f6f8627406ef23c35fc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3412
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3412 -s 464
  2⤵
  - Program crash
  PID:4084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3412 -ip 3412
1⤵
PID:1044