3d1aadb1304dd6ed322469d4799ebfce6e29f203b67f7cadb202c7ebc9aedec5

Analysis

max time kernel
92s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2022 15:33

Target

3d1aadb1304dd6ed322469d4799ebfce6e29f203b67f7cadb202c7ebc9aedec5.exe
Size

33KB
MD5

826a8e721f565a37a22910be72af1bd0
SHA1

4ace654ec793dbdc4f66f1c7d851c18f8b7cf536
SHA256

3d1aadb1304dd6ed322469d4799ebfce6e29f203b67f7cadb202c7ebc9aedec5
SHA512

77e409cc40fdbf439623f3d754cc04bb67ad43d9b7c0e6d40f580823edf088c993158403bcb7b0edbddc2297654d3e7a219225b96bb5c5fe1944cd27ee1bdf27
SSDEEP

768:pCIquqkVVeKfsrWsCbkIL+mAe4EkVBnqf+:pCIquVbvfsrWFbKmAe490

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4924	488	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
488	3d1aadb1304dd6ed322469d4799ebfce6e29f203b67f7cadb202c7ebc9aedec5.exe

C:\Users\Admin\AppData\Local\Temp\3d1aadb1304dd6ed322469d4799ebfce6e29f203b67f7cadb202c7ebc9aedec5.exe
"C:\Users\Admin\AppData\Local\Temp\3d1aadb1304dd6ed322469d4799ebfce6e29f203b67f7cadb202c7ebc9aedec5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:488
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 488 -s 472
  2⤵
  - Program crash
  PID:4924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 488 -ip 488
1⤵
PID:4956