3e9b6c1aa94548ba089720ff0e1eb25152162f925f3a55cf8b0e770f0e647d81

Analysis

max time kernel
188s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 20:08

Target

3e9b6c1aa94548ba089720ff0e1eb25152162f925f3a55cf8b0e770f0e647d81.exe
Size

223KB
MD5

919ed9fffbd918eba1edfb05b706c4e0
SHA1

00233ce41469385a19c018b1cacb191e76d79381
SHA256

3e9b6c1aa94548ba089720ff0e1eb25152162f925f3a55cf8b0e770f0e647d81
SHA512

7688763068cececf5b359a8cf54bd0d7907875952b3c1bd044eb0dbb10c994b2833651f74707f6aabc7313cab916ad7785b84dcf0fd15892348bbe0794441b49
SSDEEP

1536:ZIFKX8qunmMb3Np199xW96ZCVh8s4aBQFNpCeB+DI3GQkVLNSLUUkh1hC7u6WT51:ZQqdsNpGVh89Cg0RdXtK9r4U8zWtE1R

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
628	4144	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4144	3e9b6c1aa94548ba089720ff0e1eb25152162f925f3a55cf8b0e770f0e647d81.exe

C:\Users\Admin\AppData\Local\Temp\3e9b6c1aa94548ba089720ff0e1eb25152162f925f3a55cf8b0e770f0e647d81.exe
"C:\Users\Admin\AppData\Local\Temp\3e9b6c1aa94548ba089720ff0e1eb25152162f925f3a55cf8b0e770f0e647d81.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4144
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 472
  2⤵
  - Program crash
  PID:628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4144 -ip 4144
1⤵
PID:1444