1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708

Analysis

max time kernel
93s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:33

Target

1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe
Size

208KB
MD5

08b5f110dfe78ab368079f5410af0cb0
SHA1

a4a2295a484b7ea90100f596336df39c79f08c4f
SHA256

1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708
SHA512

fd56a4eedb32168112228eecef1f9cad3e65c7db5d9df4381cf6d2ae7dde18558a92c9b570ae0852182b687e1b739090048c9593f94a26e3c846a7c95be0241a
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5092 2284 WerFault.exe 1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe

pid process

2284 1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe

pid	pid_target	process	target process
5092	2284	WerFault.exe	1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe

pid	process
2284	1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe

C:\Users\Admin\AppData\Local\Temp\1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe
"C:\Users\Admin\AppData\Local\Temp\1605f51117212803254cb241a68f37c2daf864950044db6bfdc12163c9013708.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 464
2⤵
- Program crash
PID:5092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2284 -ip 2284
1⤵
PID:1004