af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f

Analysis

max time kernel
165s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
07/12/2022, 02:37

Target

af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f.exe
Size

227KB
MD5

321d12a87952f3e8dfefff21a52569f0
SHA1

0523ed5d01b01cedeef5881d1734ef281f937f43
SHA256

af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f
SHA512

8d63a81cade04397bcf7fbdddbdd14dadd361b184b1da76bf3584cdc7e3c8974d108dfae70efce670444e0f3ce0b78d2b04527821af1d6fa4c32c505e905fce0
SSDEEP

3072:N+ulczZwbYfa0yTVrs063bKvVBPWwGHWtRcHOnCSeoufiyp:ZnvTFAaBPlRcuCSYqe

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5088	2308	WerFault.exe	44

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2308	af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f.exe

C:\Users\Admin\AppData\Local\Temp\af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f.exe
"C:\Users\Admin\AppData\Local\Temp\af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2308
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2308 -s 884
  2⤵
  - Program crash
  PID:5088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2308 -ip 2308
1⤵
PID:3628