9575e418eb569554ea906622fc782a050ce94fc465798faf4cea51a6ab97b789

Analysis

max time kernel
111s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2022 20:26

Target

9575e418eb569554ea906622fc782a050ce94fc465798faf4cea51a6ab97b789.exe
Size

37KB
MD5

0b772f14c89af094928a4a83231f06b0
SHA1

9b340392ad4a0b2c5e20215d2a5319dcbadb0032
SHA256

9575e418eb569554ea906622fc782a050ce94fc465798faf4cea51a6ab97b789
SHA512

c9db6f92610c5ae7615d9cc95c0d8ca14df77095d45f89b72be7ea0bf32b63fa01a8e0302cbf5c0769fd81e7044fbd6f93f61021c866dcceca93a442de26909c
SSDEEP

768:Eyf4uDKrBMOTh6wbaqn7GqEl97wagRMOZ:xAumrBTh6wbObl901R

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3204	2324	WerFault.exe	63

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2324	9575e418eb569554ea906622fc782a050ce94fc465798faf4cea51a6ab97b789.exe

C:\Users\Admin\AppData\Local\Temp\9575e418eb569554ea906622fc782a050ce94fc465798faf4cea51a6ab97b789.exe
"C:\Users\Admin\AppData\Local\Temp\9575e418eb569554ea906622fc782a050ce94fc465798faf4cea51a6ab97b789.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2324
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2324 -s 464
  2⤵
  - Program crash
  PID:3204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 2324 -ip 2324
1⤵
PID:2972