9369c8e914653070131fe9699d18617f367c403eae6d739bdef7974d50c3e032

Analysis

max time kernel
146s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2022 21:56

Target

9369c8e914653070131fe9699d18617f367c403eae6d739bdef7974d50c3e032.exe
Size

648KB
MD5

612d3a263b05cdf932144c4b86a81588
SHA1

c4fabf889d321b89c0ccd15ae4089afe3f21a18d
SHA256

9369c8e914653070131fe9699d18617f367c403eae6d739bdef7974d50c3e032
SHA512

81aa5b3b919299bfc3410ce7ee9016c43583b0d7a8be50913757b7f48d6f671c4dd7d259a9c3173a3e41245f63c10b54f45e127407664d53475e9d2ac97be2d1
SSDEEP

6144:F76EZgP8mXJyt7q0hwf3bbf6NsV1ie7vdfY2zJlsJ9nuL5CAxTCCyzwZThI/2V:EE41J+qrzoup7BYyJlsJ9uEiA2V

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1616	1380	WerFault.exe	82

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1380	9369c8e914653070131fe9699d18617f367c403eae6d739bdef7974d50c3e032.exe

C:\Users\Admin\AppData\Local\Temp\9369c8e914653070131fe9699d18617f367c403eae6d739bdef7974d50c3e032.exe
"C:\Users\Admin\AppData\Local\Temp\9369c8e914653070131fe9699d18617f367c403eae6d739bdef7974d50c3e032.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1380
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1380 -s 584
  2⤵
  - Program crash
  PID:1616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1380 -ip 1380
1⤵
PID:228