cbbe660ae7813910beb0dec3104631494643c25cfb77f7aca2a836ef692ecc4a

Analysis

max time kernel
124s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23/11/2022, 19:19

Target

cbbe660ae7813910beb0dec3104631494643c25cfb77f7aca2a836ef692ecc4a.exe
Size

134KB
MD5

45dcbfe2b2adbe3ad1e71f419c756770
SHA1

3f7c21a005bc745caca400c0b325e6308d7d59a3
SHA256

cbbe660ae7813910beb0dec3104631494643c25cfb77f7aca2a836ef692ecc4a
SHA512

3df221e34c27b4beb94574022e94b355c73b59f02a1249c93cfdcf98c36d117724d17d6bb24ce340ccbe5742804f6f4601f45d89408db07bd1b51014b416a57f
SSDEEP

3072:Zu8QWIGhk7S+b1FESKyYrCU9m0XCULdI:Z/QLGh+BWScm+x

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2128	2532	WerFault.exe	81
2872	2532	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2532	cbbe660ae7813910beb0dec3104631494643c25cfb77f7aca2a836ef692ecc4a.exe

C:\Users\Admin\AppData\Local\Temp\cbbe660ae7813910beb0dec3104631494643c25cfb77f7aca2a836ef692ecc4a.exe
"C:\Users\Admin\AppData\Local\Temp\cbbe660ae7813910beb0dec3104631494643c25cfb77f7aca2a836ef692ecc4a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 500
  2⤵
  - Program crash
  PID:2128
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 420
  2⤵
  - Program crash
  PID:2872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2532 -ip 2532
1⤵
PID:2436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2532 -ip 2532
1⤵
PID:3392