bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e

Analysis

max time kernel
221s
max time network
232s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:31

Target

bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe
Size

152KB
MD5

e915ba3f09d9c090474e540df7f53730
SHA1

f8275182b835e4a2fbe47e3f8b6af3d4994285ee
SHA256

bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e
SHA512

bd606201bfa24a89bb2ca7d7451fd58c43a102e6cbf99c2cf17d803a00b1f672cbd0b3d86ba3944d143a8ec1fcaa296576238d993e738f5165c83a5387b3f9c4
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1232 2584 WerFault.exe bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe

pid process

2584 bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe

pid	pid_target	process	target process
1232	2584	WerFault.exe	bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe

pid	process
2584	bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe

C:\Users\Admin\AppData\Local\Temp\bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe
"C:\Users\Admin\AppData\Local\Temp\bb8e9b560692b9f93fcc64cd1d686e51694171e374f924be87d1be2ace646f1e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2584 -s 468
2⤵
- Program crash
PID:1232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2584 -ip 2584
1⤵
PID:736