e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b

Analysis

max time kernel
167s
max time network
205s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:32

Target

e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe
Size

208KB
MD5

09ceed4da2fd23a712beece8dd76f250
SHA1

745291d4a37a0cc590d80b99849598d9dff1835d
SHA256

e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b
SHA512

8df0a53845c359844bdaee8a5cbe219a5344595b3f98adf9c9e1b3678cb62b23050257a96a90118155b9d686e2c5f277f2fcdf6118af478afe8d18d4f89e17ab
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4520 3492 WerFault.exe e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe

pid process

3492 e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe

pid	pid_target	process	target process
4520	3492	WerFault.exe	e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe

pid	process
3492	e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe

C:\Users\Admin\AppData\Local\Temp\e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe
"C:\Users\Admin\AppData\Local\Temp\e95362f5e4ddb0bfcb5b7d0f9c80311d8781511a44a47b3402ef187d4faa350b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3492 -s 464
2⤵
- Program crash
PID:4520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3492 -ip 3492
1⤵
PID:3704