c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66

Analysis

max time kernel
154s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 16:50

Target

c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe
Size

252KB
MD5

44512164c56f4930383b7d13a7278690
SHA1

c758b0593ad0048630b07f4268a6a66d70f458bf
SHA256

c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66
SHA512

b204d7aa285c5284688e0237708f8fe431b7f1b841e899fb9e2b7436ccdfc3bc72f3478391016615dfb9483b50b17d7d2df3676f275d1aaeafb09496af3a07d1
SSDEEP

6144:oeiQL9y4qam1ZeTEf/ab8PXV2maMPaAmD5rv3kjCGc/rgt2T1aaJjZUmG:oeZL9yNaitf/ab8/kmaMPaAerv3E2jZU

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4328 2036 WerFault.exe c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe

pid process

2036 c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe

pid	pid_target	process	target process
4328	2036	WerFault.exe	c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe

pid	process
2036	c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe

C:\Users\Admin\AppData\Local\Temp\c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe
"C:\Users\Admin\AppData\Local\Temp\c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 692
  2⤵
  - Program crash
  PID:4328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2036 -ip 2036
1⤵
PID:3760