e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/12/2022, 01:26

Target

e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe
Size

36KB
MD5

2a856c0b55415836a010a878204e0983
SHA1

45eff4b385c123863e5b0039e4b6b198bd2ac5d0
SHA256

e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217
SHA512

1821c744bfc36d26cb9d9b13c019ba9ebb4c97da84ef359b82f3d19601db7d20fa0208485ef308cf4e2eda4230b17a38cf31821496cf55f05207468f39576372
SSDEEP

384:AnjhgGTZoZsV2t0+55dO9jnO7e4Wh17cU9Rgdav5aqK0l0Or59sleJ:AjhLS9J5vO9jnO7e4Ix92daDHzbJ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4872	4780	WerFault.exe	77

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4780	e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe
4780	e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe
4780	e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe
4780	e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe

C:\Users\Admin\AppData\Local\Temp\e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe
"C:\Users\Admin\AppData\Local\Temp\e0b8ce3eb6574b79a103739f1aa1532183d5cc5dfc9c5f0ee1232815f971c217.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4780
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4780 -s 1624
  2⤵
  - Program crash
  PID:4872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4780 -ip 4780
1⤵
PID:4924