0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705

Analysis

max time kernel
124s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
20/08/2023, 21:19

Target

0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705.exe
Size

7.9MB
MD5

ae6bea008757e0611048be27b2ed45ae
SHA1

a4bba57b4e0571b980265ca244585de7d4f6051c
SHA256

0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705
SHA512

1aed4ae350ea8bea075cf243c9aedeb87ddbba81e193f33d6bfe28f25cf773ed331b312cd25f5fecb4c4ef50973180aa57b75cfb14a26d3034b8a4f1b0c2737c
SSDEEP

98304:S2jFuCV3JpZ7l9oLCqqndblBLTckSk95IWSnLDwnemjKq0QEhjTJBAUZLjt:SIdx5hl6kS7WSLDwnxKFQIjTJV1

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3864	1508	WerFault.exe	80

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1508	0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705.exe
1508	0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705.exe

C:\Users\Admin\AppData\Local\Temp\0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705.exe
"C:\Users\Admin\AppData\Local\Temp\0e6683934b8b94702a70f5d306e4fa4404f008fefe0d5ba7e05869bfffee3705.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1508
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1508 -s 680
  2⤵
  - Program crash
  PID:3864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1508 -ip 1508
1⤵
PID:4672