ee4f717963b7652d587477edb7c1e6a3e4b9d4ee63d3b2ab77fb7fb4697e9c2a

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2022 21:12

Target

ee4f717963b7652d587477edb7c1e6a3e4b9d4ee63d3b2ab77fb7fb4697e9c2a.exe
Size

400KB
MD5

576a9c348a150b8a909de8d7bafd37b9
SHA1

710a7d639b8903f68bf0d8e1cad01b3848d2b995
SHA256

ee4f717963b7652d587477edb7c1e6a3e4b9d4ee63d3b2ab77fb7fb4697e9c2a
SHA512

a59182b78c0ba92171b03190edf83fec0bd2d452b8969b04bc08016ab2ff2143fc9cb445feae5588cf4d89f1ac5332d8f97740f4a5c82f7952a1f89bc248f6a7
SSDEEP

12288:019DEpEF52/BQRiQCKCC/MyYjWVxjAiO4CNY:w9oKFMIi1KdQ6xjAT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4264	2620	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2620	ee4f717963b7652d587477edb7c1e6a3e4b9d4ee63d3b2ab77fb7fb4697e9c2a.exe

C:\Users\Admin\AppData\Local\Temp\ee4f717963b7652d587477edb7c1e6a3e4b9d4ee63d3b2ab77fb7fb4697e9c2a.exe
"C:\Users\Admin\AppData\Local\Temp\ee4f717963b7652d587477edb7c1e6a3e4b9d4ee63d3b2ab77fb7fb4697e9c2a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2620
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2620 -s 872
  2⤵
  - Program crash
  PID:4264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2620 -ip 2620
1⤵
PID:2268

memory/2620-132-0x0000000000760000-0x0000000000765000-memory.dmp

Filesize
20KB

Download
memory/2620-133-0x0000000000400000-0x00000000004CA000-memory.dmp

Filesize
808KB

Download