e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2023, 08:57

Target

e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496.exe
Size

4.0MB
MD5

a736e29258bfc0eb7c067eda99edfa5f
SHA1

aaec131626bbc1d7896234e4cb43ab6551901e03
SHA256

e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496
SHA512

ba6b42353ab95224543461dceaae6f6dcc52963848efde3b848ad06384633fac631dbea8de3815bbcd98afc75c72431a5ccaf21b97438ef0d06b077fa40995fe
SSDEEP

98304:8X1dP62w1cWvcjOS20M5hi4gRj0EqjMk:wfw2jO/55hXmX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2824	3828	WerFault.exe	85

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3828	e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496.exe
3828	e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496.exe

C:\Users\Admin\AppData\Local\Temp\e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496.exe
"C:\Users\Admin\AppData\Local\Temp\e518eade981e0afd52c537ea25e70357bdb87de8c3310d0b0aeb30910383c496.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3828
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3828 -s 664
  2⤵
  - Program crash
  PID:2824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3828 -ip 3828
1⤵
PID:4296