40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 19:58

Target

40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6.exe
Size

293KB
MD5

1d0ca469e3bf55346acb5eb833788950
SHA1

44d6bcc7c1d88267697a3bae0e2f70f99726ee57
SHA256

40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6
SHA512

0500e6a08c0636a8befe1919cb36f90b307b9fa46753135c9ba3430e0bda1fa0191e3b1671cf06c6b104b77fe6c262a007a0f57dd741ac244d1537efdb4aa7ff
SSDEEP

3072:fj5DsbrQz7kYCe9wKc8cqTnYGgvQgjjZSEvpfO9b0p/I3BbBkh4:R6Q3qL8tdQjZbhGB9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4968	2200	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2200	40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6.exe

C:\Users\Admin\AppData\Local\Temp\40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6.exe
"C:\Users\Admin\AppData\Local\Temp\40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 724
  2⤵
  - Program crash
  PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2200 -ip 2200
1⤵
PID:5056