89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:44

Target

89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe
Size

114KB
MD5

66613e3e8afffb44443b375ad4ae891f
SHA1

e39d98c8c00b55a70dcbe424cb5483205bd75eb6
SHA256

89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c
SHA512

aa016e04f7c9534ed8f129d6a0f587772920a811376a3b6d253e505937c97a2953cef107fc2ffef64390ab8cb1ba78db11dda5931f94fe8c1fd392d5d1c846e4
SSDEEP

1536:cYI8bA8r/ODvarHHo42j8QT0J6gH5mpbejPCkORDTDHL066WNqbXNZ3DFG6:cD8UM/ODGHo8tMpCjqDTX066WNqT3Dj

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1464 448 WerFault.exe 89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe

pid process

448 89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe

pid	pid_target	process	target process
1464	448	WerFault.exe	89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe

pid	process
448	89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe

C:\Users\Admin\AppData\Local\Temp\89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe
"C:\Users\Admin\AppData\Local\Temp\89de06c3a0578431f63f029e9e5014079de4375bd8d376bba6096e46ce2f864c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 448 -s 424
2⤵
- Program crash
PID:1464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 448 -ip 448
1⤵
PID:4792