bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f

Analysis

max time kernel
133s
max time network
66s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-10-2022 02:13

Target

bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe
Size

372KB
MD5

1fbc0dd1992a06110f9683c993795539
SHA1

4b1f22b92da73d097ba32697594bc6d5640cee7b
SHA256

bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f
SHA512

3a4458558cdc08504cdfa92c07da8d91288ba2cdb99eabef53ad04d49712e218d1080f7e3b6d7721e731bbd8e4bc235fcfd6c75bc9a02a86b7e15c11a3471466
SSDEEP

6144:VyuuGAXCBlSUNZ5k1b6IRvsAGWDWaDHJb9thxL+NFBoS1wf28kXTiVQdbMj8ABcf:VyuWXC3SsZ5k1b6wjWQpfxKNXJTXTyAx

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4796	4412	WerFault.exe	21

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4412	bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe

C:\Users\Admin\AppData\Local\Temp\bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe
"C:\Users\Admin\AppData\Local\Temp\bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4412
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4412 -s 916
  2⤵
  - Program crash
  PID:4796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4412 -ip 4412
1⤵
PID:3164

memory/4412-132-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download