50a406fd9a650c2bc987d62908095b0591fcc8f23c76debc28d8bde85b30b371

Analysis

max time kernel
158s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 15:16

Target

50a406fd9a650c2bc987d62908095b0591fcc8f23c76debc28d8bde85b30b371.exe
Size

72KB
MD5

96e7f1752c465f6231166f63daf77510
SHA1

44a1a6fe480a31a741def679d07dd4df097f364b
SHA256

50a406fd9a650c2bc987d62908095b0591fcc8f23c76debc28d8bde85b30b371
SHA512

4e583cf0be232150835b0f4007c216a6011149a9f7548b8ab3406326aebf98cd7592326b6b6d40821c006ac66ba5c4d24b57631ae1af086895b05b1a13d51f1c
SSDEEP

768:t5R5gYG9JijBBUpTKaBlYsqaQjqBSuzGr0PTajMMEOyyeOsil:tRGbil5aHiYSNOQCONl

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4228	4420	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4420	50a406fd9a650c2bc987d62908095b0591fcc8f23c76debc28d8bde85b30b371.exe

C:\Users\Admin\AppData\Local\Temp\50a406fd9a650c2bc987d62908095b0591fcc8f23c76debc28d8bde85b30b371.exe
"C:\Users\Admin\AppData\Local\Temp\50a406fd9a650c2bc987d62908095b0591fcc8f23c76debc28d8bde85b30b371.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4420
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4420 -s 464
  2⤵
  - Program crash
  PID:4228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4420 -ip 4420
1⤵
PID:5068