e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82

Analysis

max time kernel
74s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:53

Target

e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe
Size

88KB
MD5

898575b71919057d48a9d2b487f3baa4
SHA1

48ed7f7a602d3aaeea8cb834ddeb5a35d1950588
SHA256

e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82
SHA512

ceee5f25963047025ebc6df708a5a3fb372b47d8641af5cae17cc46728e75db0d3418144248b92de47efdc2b951c0325f0a9cb06e910d60aaa2014253ad83f5a
SSDEEP

1536:IL/7VlZlmD8Hv0MC4A9nIHSB5CBnZoA8sWQh8VSD8r:OTVlZlmgP0F4A5H3CZhQQcSg

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2348 3704 WerFault.exe e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe

pid	pid_target	process	target process
2348	3704	WerFault.exe	e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe

pid	process
3704	e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe
3704	e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe

C:\Users\Admin\AppData\Local\Temp\e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe
"C:\Users\Admin\AppData\Local\Temp\e0f14a17c3b8e3269c8c0ab81aa8595bd6e80c4a93c30ddf9822d192740eff82.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3704

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3704 -s 448
2⤵
- Program crash
PID:2348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3704 -ip 3704
1⤵
PID:1984