199be30f833a80daa588ad104ea4f6ead50bc53c10f79c15a03a9648da961dd7

Analysis

max time kernel
150s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
21-11-2022 16:42

Target

199be30f833a80daa588ad104ea4f6ead50bc53c10f79c15a03a9648da961dd7.exe
Size

201KB
MD5

12104439569c3664b380e356265eafb7
SHA1

67ecd0819277cca961c2e5d20067e1532beaba2b
SHA256

199be30f833a80daa588ad104ea4f6ead50bc53c10f79c15a03a9648da961dd7
SHA512

ad2206b7e17591320bbf005e6a1f2999c8cc1e374f4549c1c6e830d6dc680231d5627bbe14cf239ceeade1c5a4f334cdd8a6bd08686c27e14eb1148777cb1714
SSDEEP

6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFN:HqEjk7l7FN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4568	1376	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1376	199be30f833a80daa588ad104ea4f6ead50bc53c10f79c15a03a9648da961dd7.exe

C:\Users\Admin\AppData\Local\Temp\199be30f833a80daa588ad104ea4f6ead50bc53c10f79c15a03a9648da961dd7.exe
"C:\Users\Admin\AppData\Local\Temp\199be30f833a80daa588ad104ea4f6ead50bc53c10f79c15a03a9648da961dd7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1376
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1376 -s 464
  2⤵
  - Program crash
  PID:4568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1376 -ip 1376
1⤵
PID:816