d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50

Analysis

max time kernel
157s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 12:19

Target

d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe
Size

148KB
MD5

20ec9cfd877c543211f6e6efd45768e0
SHA1

5e46c3ab143315382fe77fe4648cb098254cd37e
SHA256

d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50
SHA512

a8ef8fa37115562e8f273275de5532a86007da32f64997e800eacdf8fd4b7447ddb3f0a58e11df18346209916d85e8ac448120db179eb71899fff15c18e3d0d4
SSDEEP

3072:DHro5oAoSAvLihg/Eed/b9aAJygxpU2en5HCldqddd+ddddt:rrY2jiy//dZBVxpU2INC

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3440 3420 WerFault.exe d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe

pid process

3420 d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe

pid	pid_target	process	target process
3440	3420	WerFault.exe	d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe

pid	process
3420	d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe

C:\Users\Admin\AppData\Local\Temp\d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe
"C:\Users\Admin\AppData\Local\Temp\d77810ca01a1bdc3b8a85a7d1d65e5b6fd61610e3a6f7ed131b1f20e6a6e4d50.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3420 -s 464
2⤵
- Program crash
PID:3440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3420 -ip 3420
1⤵
PID:3040