829dbce7b9038091346437222ee6e04ad4fe5bfb63763c5444c26e654b1cc863

Analysis

max time kernel
92s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 00:14

Target

829dbce7b9038091346437222ee6e04ad4fe5bfb63763c5444c26e654b1cc863.exe
Size

176KB
MD5

cb672ea3f97bb25da6038e1a8c364e73
SHA1

dd7508784f7b50e65fc397b01e99281b64dce780
SHA256

829dbce7b9038091346437222ee6e04ad4fe5bfb63763c5444c26e654b1cc863
SHA512

6c7f66c80aceb0a632f8987a29617417d51d56a7f7d494a5bccfc8992893c01f32b74a29a8972a0956c04633d731a4142e1036550a2ecec1e22151717a653353
SSDEEP

3072:wErHPNHLk2URFpAJb4O3JDmSufeHcpF3eKatFyK/fObT/bGiyrDmwBWbrVELUiBo:wETN3URjAJb4O3JDm9feHcpF3DjK/fOD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4588	4072	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4072	829dbce7b9038091346437222ee6e04ad4fe5bfb63763c5444c26e654b1cc863.exe

C:\Users\Admin\AppData\Local\Temp\829dbce7b9038091346437222ee6e04ad4fe5bfb63763c5444c26e654b1cc863.exe
"C:\Users\Admin\AppData\Local\Temp\829dbce7b9038091346437222ee6e04ad4fe5bfb63763c5444c26e654b1cc863.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4072
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4072 -s 464
  2⤵
  - Program crash
  PID:4588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4072 -ip 4072
1⤵
PID:3124