99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:31

Target

99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe
Size

152KB
MD5

30b0b5ba17e8f6e69c7ae4a1e051ac30
SHA1

85d578c1ae2ac8b4cfd35ad6f0060f664759ce97
SHA256

99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf
SHA512

786652251fbdb56a052708cace064852f142414c81bb84b9bbfb85a0b71a0f35257987395223d83960b359bf72a569ead4d4a8727d92f41d1623fb5e857ae131
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1920 4956 WerFault.exe 99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe

pid process

4956 99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe

pid	pid_target	process	target process
1920	4956	WerFault.exe	99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe

pid	process
4956	99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe

C:\Users\Admin\AppData\Local\Temp\99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe
"C:\Users\Admin\AppData\Local\Temp\99e0cec73721a7939f991571ed4c3a7a659410db6039d7fc3abc67e580542fbf.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 464
2⤵
- Program crash
PID:1920

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4956 -ip 4956
1⤵
PID:3532