f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2

Analysis

max time kernel
151s
max time network
184s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 17:09

Target

f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe
Size

32KB
MD5

43c2162ae3fb890d4e3c7066e5ca1100
SHA1

a5e6cda47dcc98ab6f7a6a191d3cce871a1ce271
SHA256

f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2
SHA512

edcb7ab911e6d81931c54b381380f6c5c92d240185a6ebd8a3a54cb26d9fa88fad5ce4ca41565313c96d45d089751160f15c88270ef007f0dda5b1944eea37bc
SSDEEP

768:6KMAYdMaka76E/oqR49XZhsn77Ein+9Oh:65AYd1RVn+9

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4980 3660 WerFault.exe f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe

pid process

3660 f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe

pid	pid_target	process	target process
4980	3660	WerFault.exe	f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe

pid	process
3660	f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe

C:\Users\Admin\AppData\Local\Temp\f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe
"C:\Users\Admin\AppData\Local\Temp\f0606f95cc706a593d79f11ffdf00ae88b7192d33532c39295d1ed0fde3f18a2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3660 -s 468
2⤵
- Program crash
PID:4980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3660 -ip 3660
1⤵
PID:4480