e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542

Analysis

max time kernel
152s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 16:54

Target

e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542.exe
Size

56KB
MD5

10055c11cd7b28ef069ee1d79e1e1d5d
SHA1

44bdbc4fd22e4d6df71d0921912dd0d03c4be021
SHA256

e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542
SHA512

cff25beb91f39dfac3831cab432685d89fb1131a7fd558c533996f2e81d32cd2009811747dfaaf50beefe448de5ab00ab9846bb0fa3a8c0a199da3115fb53955
SSDEEP

768:17+jRrzWFDo/p8bbOAcDCudBSwFOXoQEmUMOX4J:eRK90CudBSWtc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
256	1728	WerFault.exe	78

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1728	e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542.exe
1728	e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542.exe

C:\Users\Admin\AppData\Local\Temp\e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542.exe
"C:\Users\Admin\AppData\Local\Temp\e1f5a71714bdfd1133142b51695e8398f8c9d5b19a2ac2ed41ad8949fb00e542.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1728
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 524
  2⤵
  - Program crash
  PID:256

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1728 -ip 1728
1⤵
PID:1844