393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd

Analysis

max time kernel
20s
max time network
17s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:33

Target

393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe
Size

208KB
MD5

b92fe9424a59826e83cbeb087c851460
SHA1

af6c9e4a8951ac4e167649ec1568bbce81afba72
SHA256

393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd
SHA512

226ee2085a391ee0f6365029e962dc7326be4056723e9b6e9b513ebe68101e57a4dd74d1c7ac37c981eeadc9da65621f7d56aea838b6806330ab0bdc434cdf74
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4944 2064 WerFault.exe 393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe

pid process

2064 393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe

pid	pid_target	process	target process
4944	2064	WerFault.exe	393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe

pid	process
2064	393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe

C:\Users\Admin\AppData\Local\Temp\393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe
"C:\Users\Admin\AppData\Local\Temp\393f2af422a568b21d54f4b47231b9825e54bc6a7aaf4c47728638d8993d1efd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 464
2⤵
- Program crash
PID:4944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2064 -ip 2064
1⤵
PID:2824