6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8

Analysis

max time kernel
152s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:33

Target

6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe
Size

208KB
MD5

1b80cb5715a2325f69db8f4fc1995da0
SHA1

9714566d570099988afff4dc09b31f220fa4c5e1
SHA256

6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8
SHA512

5c6795ea6a1c77dc140bbee8aedeb86b2dcf23deedeb8a77d87933e0a3300d9ef4174e538525b14f4182fd71ab69058a8f0a0c3d35ff93b6c6e295dd71ddefec
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1388 1432 WerFault.exe 6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe

pid process

1432 6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe

pid	pid_target	process	target process
1388	1432	WerFault.exe	6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe

pid	process
1432	6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe

C:\Users\Admin\AppData\Local\Temp\6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe
"C:\Users\Admin\AppData\Local\Temp\6704b39d075aeedf60893ffac549ab8622a8b5580adbe612e4417d7e110249c8.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1432 -s 464
2⤵
- Program crash
PID:1388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1432 -ip 1432
1⤵
PID:3484