72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745

Analysis

max time kernel
139s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
30/08/2023, 21:08

Target

72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745.exe
Size

1.9MB
MD5

c09c3adc66ba0374a9db831f04584d7d
SHA1

44cd76ab6bcfd9f8618028a6e1c7fcd84dcfa4ce
SHA256

72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745
SHA512

d64ec0b6ffd7d6c83c5d81a3e1923060581e433bc22f8e7633d9d266cbd01ab573b685ca5c61bebf217f5aeb472af8c2f69bf5b87ce02f5c49ec839736332c55
SSDEEP

24576:qUEgOzzybDpwknIS9ICz3jEDutoAgBi3Rzbt4jrDYDB1bdyB1bS:qjg6apDICmpAj3ZD4S

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4208	4848	WerFault.exe	83

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4848	72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745.exe
4848	72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745.exe

C:\Users\Admin\AppData\Local\Temp\72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745.exe
"C:\Users\Admin\AppData\Local\Temp\72b9cbbf3e7cd6d3851382fe69cd9405ba9ae255ef297c3ce6030a790e2a1745.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4848
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4848 -s 572
  2⤵
  - Program crash
  PID:4208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4848 -ip 4848
1⤵
PID:4352