79ee9dcca9c477e85946eca7f4443ea21960b813898e53474811313700e3a669

Analysis

max time kernel
105s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19/11/2022, 12:15

Target
79ee9dcca9c477e85946eca7f4443ea21960b813898e53474811313700e3a669.exe
Size 952KB
Sample221119-pezhasah83
SHA256 79ee9dcca9c477e85946eca7f4443ea21960b813898e53474811313700e3a669
MD5 531c7f4ccb14fe0f32364e2a1d17b2f0
SHA1 40e72175024d289de64a76c140415d969c2557b5
SHA512 ca9ef26e6d931341ae7a4df80f121f96cfc88008d64c3ff073a9c32495fc0571307cf1a4bd85984b7fc13e10661e97b8ef455e34937499fa6f27863cdece6555
SSDEEP 12288:byyy7Z3z4I8NXOGjwwG/ZjXsAHHz79p9NM5Tz103j2CF4TxQUOfhVPOSAE//VAci:baCI2OewFJN4mkxyHnnew1SatLRzD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2436	1780	WerFault.exe	45

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1780	79ee9dcca9c477e85946eca7f4443ea21960b813898e53474811313700e3a669.exe

C:\Users\Admin\AppData\Local\Temp\79ee9dcca9c477e85946eca7f4443ea21960b813898e53474811313700e3a669.exe
"C:\Users\Admin\AppData\Local\Temp\79ee9dcca9c477e85946eca7f4443ea21960b813898e53474811313700e3a669.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1780
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1780 -s 464
  2⤵
  - Program crash
  PID:2436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 1780 -ip 1780
1⤵
PID:1496