98cdb66a130a8dd221b2a9258d8161e2978dbde91a144b9fa92e7bf0df3415db

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 08:02

Target

98cdb66a130a8dd221b2a9258d8161e2978dbde91a144b9fa92e7bf0df3415db.exe
Size

123KB
MD5

1352f9d51aaf45d0065b4604da7ccec0
SHA1

749d77f5580b91414f7daa6397c13ef522b8f97d
SHA256

98cdb66a130a8dd221b2a9258d8161e2978dbde91a144b9fa92e7bf0df3415db
SHA512

88f7f91b637cd5f2a7c193ae84e7ebad964d22c42048f1602a4842f312fd928b504c7554d05040e7d4ce120ab47aabc5c0c08d668c66f09c9e68a6eac2e58c31
SSDEEP

3072:j9qA59Rx2Q6QH4ke9UZRuwYA8CyDqhRbU:j9bRld70LAhyDylU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4928	2680	WerFault.exe	75

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2680	98cdb66a130a8dd221b2a9258d8161e2978dbde91a144b9fa92e7bf0df3415db.exe

C:\Users\Admin\AppData\Local\Temp\98cdb66a130a8dd221b2a9258d8161e2978dbde91a144b9fa92e7bf0df3415db.exe
"C:\Users\Admin\AppData\Local\Temp\98cdb66a130a8dd221b2a9258d8161e2978dbde91a144b9fa92e7bf0df3415db.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2680
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 696
  2⤵
  - Program crash
  PID:4928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2680 -ip 2680
1⤵
PID:532