e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:32

Target

e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe
Size

208KB
MD5

e1c1de71aeb158e88bd6e07d8aa2e490
SHA1

d37d41fd8702558bc10496e154bc94a823f8cbf8
SHA256

e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539
SHA512

8f2dea186d961416ad5e7938cd914319656f4873e8af56d677d6da3b15fe2dc4b3202235c0020dca281d35998e39ca37173a9d1e7cc2f1af9541f4dadce12510
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2316 2328 WerFault.exe e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe

pid process

2328 e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe

pid	pid_target	process	target process
2316	2328	WerFault.exe	e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe

pid	process
2328	e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe

C:\Users\Admin\AppData\Local\Temp\e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe
"C:\Users\Admin\AppData\Local\Temp\e6238cbf33635ad21f04edb1dd407b999edcf522c8983c73faf646f684a1f539.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 464
2⤵
- Program crash
PID:2316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2328 -ip 2328
1⤵
PID:4024