7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:33

Target

7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe
Size

208KB
MD5

a7c776e5a1af6a40b81da1534efb2f10
SHA1

7074227f6290edfe796684ae92c65324ba4edd44
SHA256

7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9
SHA512

ee411699c99fcfc422eaff7680bb9664f3a12f924a77d06c737a60816550fd268820192dfe4eee28c899305d5d83f620ca90916cccb7602e824082409df3521a
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1480 1268 WerFault.exe 7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe

pid process

1268 7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe

pid	pid_target	process	target process
1480	1268	WerFault.exe	7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe

pid	process
1268	7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe

C:\Users\Admin\AppData\Local\Temp\7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe
"C:\Users\Admin\AppData\Local\Temp\7466584c38d78c280b7300d636fc4b150af170b3968387631f1d0cc03d61c7e9.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1268

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1268 -s 468
2⤵
- Program crash
PID:1480

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 1268 -ip 1268
1⤵
PID:4696