69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd

Analysis

max time kernel
91s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:56

Target

69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe
Size

384KB
MD5

707d0897c58feb3c53e08d67981b706a
SHA1

e6840e5d801d20272796bb6f2321bf6b7e16465a
SHA256

69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd
SHA512

07b6299afa68f765058ca8a68049bc9a6d9ab61fbfe90465aee30c86b9670ac84acb32a5f84b78a53e04a70b9fbd56528fa587693780623fef59a3bf7ca03e22
SSDEEP

6144:rEojoK+xjjOMUETS9CbF+IaU/oBWg9/VfKOsyiNEt9mjYlRwxJLVXyiRm:rEo4eC9aU/X0Vi3NEvlRAXzo

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3084 4828 WerFault.exe 69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe

pid process

4828 69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe

pid	pid_target	process	target process
3084	4828	WerFault.exe	69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe

pid	process
4828	69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe

C:\Users\Admin\AppData\Local\Temp\69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe
"C:\Users\Admin\AppData\Local\Temp\69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4828 -s 924
2⤵
- Program crash
PID:3084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4828 -ip 4828
1⤵
PID:2800

memory/4828-132-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download