b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22

Analysis

max time kernel
186s
max time network
197s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 13:38

Target

b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe
Size

192KB
MD5

b1362352a4cb1269f58c1185db7f32c1
SHA1

48d065edc57d888c1b621f6a71433ba7c790adf1
SHA256

b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22
SHA512

223bb8a7014ec1472598b67c15fe8a9bc9f30dfc11354be965670802db852c6faa340045a55b8a2a25318e005cefd3c0fd3072f61f521ee84ab647e58205812f
SSDEEP

3072:ISOcMIJAJiWHIb+RTcL5gSfDa2mnYkIueJ3PpVrijlUDS/NsNdZB:ISEIqJfzRMgSf27kBPpVrixUG/NE

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4692 2228 WerFault.exe b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe

pid process

2228 b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe

pid	pid_target	process	target process
4692	2228	WerFault.exe	b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe

pid	process
2228	b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe

C:\Users\Admin\AppData\Local\Temp\b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe
"C:\Users\Admin\AppData\Local\Temp\b9ece19aa0573452e5986565a8fac1b6305a30347e6e64d5fcfd82cdc0005d22.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2228

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 468
2⤵
- Program crash
PID:4692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2228 -ip 2228
1⤵
PID:4724