2076706e998126022bdf30dd3e1c7de23f8d48dc6cb11757ec8fbe99461bff65

Analysis

max time kernel
185s
max time network
204s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 18:16

Target

2076706e998126022bdf30dd3e1c7de23f8d48dc6cb11757ec8fbe99461bff65.exe
Size

184KB
MD5

525edc62a9421d67d2f4f603bcfc9500
SHA1

de4a6d94a1108ca5beddb22896348b91673565c0
SHA256

2076706e998126022bdf30dd3e1c7de23f8d48dc6cb11757ec8fbe99461bff65
SHA512

2d285003aab58fed81f3fddb258be46b5a6e3c12086eedc3023c9e0ebf7da08e9d8f5b3a7843ce454d2eeb546f59d3ac95876bef3fd68a80e40af4f04819f5fc
SSDEEP

3072:bU2A1cfl/BTyzcM+Knvmb7/D263i4qMbBQhAKIWOD2r1oX1/hcNcfAUane4RFsUu:vyClpTFzKnvmb7/D26y4qMSyKbOD2r1k

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
392	4272	WerFault.exe	83

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4272	2076706e998126022bdf30dd3e1c7de23f8d48dc6cb11757ec8fbe99461bff65.exe

C:\Users\Admin\AppData\Local\Temp\2076706e998126022bdf30dd3e1c7de23f8d48dc6cb11757ec8fbe99461bff65.exe
"C:\Users\Admin\AppData\Local\Temp\2076706e998126022bdf30dd3e1c7de23f8d48dc6cb11757ec8fbe99461bff65.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4272
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4272 -s 464
  2⤵
  - Program crash
  PID:392

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4272 -ip 4272
1⤵
PID:1844