39bc032112aef70d7671c9776f91d49bc02ffaea016ef9315409f1b2803d3245

Analysis

max time kernel
91s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
16/10/2022, 01:49

Target

39bc032112aef70d7671c9776f91d49bc02ffaea016ef9315409f1b2803d3245.exe
Size

1.9MB
MD5

b6c24fdf867e45e7f2e76a7e4b14996d
SHA1

3087220eaabc8b5245714f9685281f8782dbbeb3
SHA256

39bc032112aef70d7671c9776f91d49bc02ffaea016ef9315409f1b2803d3245
SHA512

ca654ab2e88a0fd1c45d2530eecfac2acfac8214de05338b03c69d40ea1c15539e1433cc1e01f2f0d1d865eab5f300989412f51139b786b53432074051ed5eca
SSDEEP

49152:x4rrKvTerV4RTL9Rvp3MBIKToakE6vet1WRYbpZZZZZZZZZZza:8KvTeBQL9X2IKToakE6vet1WR8Q

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
556	4296	WerFault.exe	81
1892	4296	WerFault.exe	81

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Users\Admin\AppData\Local\Temp\39bc032112aef70d7671c9776f91d49bc02ffaea016ef9315409f1b2803d3245.exe
"C:\Users\Admin\AppData\Local\Temp\39bc032112aef70d7671c9776f91d49bc02ffaea016ef9315409f1b2803d3245.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4296
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4296 -s 616
  2⤵
  - Program crash
  PID:556
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4296 -s 636
  2⤵
  - Program crash
  PID:1892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4296 -ip 4296
1⤵
PID:3372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 4296 -ip 4296
1⤵
PID:1896