826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7

Analysis

max time kernel
187s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 18:45

Target

826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe
Size

26KB
MD5

53bafbf1c212e83b9b3ec578da5533f0
SHA1

97e835178f7f2372a4349b5a6dc01b5a2b547f9b
SHA256

826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7
SHA512

aadef6830b58e1236e14b62a92711fd8339ef5c7da0615ee38a19028bd45e5d53fa4f586f55c8ba948c9a3374ca677d3b6c8d1f0fd29977d7041ac2d3147d71f
SSDEEP

384:+iIdW+futXWKuG4mEOEEvXEIp6u7pxqiePgl9ffwQRu6KLx0Fq9:+iIdW+2FbZp626OAQVKLx0Fq9

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4084 2032 WerFault.exe 826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe

pid process

2032 826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe

pid	pid_target	process	target process
4084	2032	WerFault.exe	826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe

pid	process
2032	826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe

C:\Users\Admin\AppData\Local\Temp\826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe
"C:\Users\Admin\AppData\Local\Temp\826bc5c80e78729d514a6a757ff7ae6d44252e63a19966a0edced8a27a06acf7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 464
2⤵
- Program crash
PID:4084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2032 -ip 2032
1⤵
PID:4684