01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2

Analysis

max time kernel
134s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/10/2022, 23:43

Target

01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2.exe
Size

112KB
MD5

9160e203f6e4ae550ae3cba535d51930
SHA1

b27174cefdba1b57ead7d240525cdb24f8a8c86b
SHA256

01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2
SHA512

40fe314cc151e9bccdee4b49a884e2c784e3a359aaff1bbd1e7604baf7c99468c3390e459ed54f63f75e9a1eccfffef86dc3607ac5fa008b4bf95942f57cc848
SSDEEP

3072:5wgRDhNuDrK1b9wXRUJql+7mVBfRM8Cw4Y:5jjuDrOuR24BkXY

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
4536	2536	WerFault.exe	81
4748	2536	WerFault.exe	81

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2536	01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2.exe
2536	01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2.exe

C:\Users\Admin\AppData\Local\Temp\01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2.exe
"C:\Users\Admin\AppData\Local\Temp\01179cd19ce1acdc48711e76455e90c8101a43a9a23569e6ecb46ee97eec25b2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2536
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2536 -s 460
  2⤵
  - Program crash
  PID:4536
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2536 -s 468
  2⤵
  - Program crash
  PID:4748

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2536 -ip 2536
1⤵
PID:4884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2536 -ip 2536
1⤵
PID:4828