2c80602c3e5c6d93e791680586fdeba2013be1bdd9663d5b2bfa54642eeca6e1

Analysis

max time kernel
137s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 01:53

Target

2c80602c3e5c6d93e791680586fdeba2013be1bdd9663d5b2bfa54642eeca6e1.exe
Size

226KB
MD5

80908065946c53ccfb64ffd4ad9343d0
SHA1

441ba319d63d73d83861effaf3a3338c3fb7e52f
SHA256

2c80602c3e5c6d93e791680586fdeba2013be1bdd9663d5b2bfa54642eeca6e1
SHA512

b57d179ecab90b49aa47eec5ab33121ef60abad524614789d3c1732996b9202db146bde71225fe6e8b9415a82f7ff68dce09b6a917e7e0a5b6edede1ae5073d9
SSDEEP

3072:1okYUwDfBDCu8EF23Bti+kaF48YVxng/2H:1oTU0fBDCuHqtilI4PgO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1324	4656	WerFault.exe	17

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4656	2c80602c3e5c6d93e791680586fdeba2013be1bdd9663d5b2bfa54642eeca6e1.exe

C:\Users\Admin\AppData\Local\Temp\2c80602c3e5c6d93e791680586fdeba2013be1bdd9663d5b2bfa54642eeca6e1.exe
"C:\Users\Admin\AppData\Local\Temp\2c80602c3e5c6d93e791680586fdeba2013be1bdd9663d5b2bfa54642eeca6e1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4656
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 464
  2⤵
  - Program crash
  PID:1324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4656 -ip 4656
1⤵
PID:620