65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c

Analysis

max time kernel
126s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
03-11-2023 16:41

Target

65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c.exe
Size

4.5MB
MD5

06567399e6223278bc71573de31a5d0f
SHA1

b7c7865a854661b03caea7808503b24577df3e1a
SHA256

65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c
SHA512

81dda6c9beddda2a11a09243a4d212e445abe6399c41dcf8b880368e0c23dbb4b7baee48f8723aa9179953bf53403ae9eecce6acca8e54120c32077175633fbd
SSDEEP

98304:xjJ7VsPiHpVfxmKyCVJPzoC392r5yyVKnFLOAkGkzdnEVomFHKnPSW:ZEPiz4K92r5yyUnFLOyomFHKnP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2172	5012	WerFault.exe	85

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5012	65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c.exe
5012	65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c.exe

C:\Users\Admin\AppData\Local\Temp\65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c.exe
"C:\Users\Admin\AppData\Local\Temp\65c63514cd57335f15581e483b5f587f8435597123701c2ef922d35c9dd31a3c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5012
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 608
  2⤵
  - Program crash
  PID:2172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 5012 -ip 5012
1⤵
PID:4972