2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39

Analysis

max time kernel
142s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
17/11/2023, 10:55

Target

2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39.exe
Size

2.7MB
MD5

b22a887a7534a6b9b3c46495df899c18
SHA1

e8c25c0107bd585f9dd35a49bd7efe9a0b130d95
SHA256

2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39
SHA512

ac95cf52add4cf63936a19888e25e4eb318533aa803506312dc8bc2434f47383f018f9a0a6b8e53c1900f6f99e5bdb2342b82b86b4825ab4ef2982261939e069
SSDEEP

49152:hBSigr4Ywxgi+6LbAbthhfjse6yAwXAf0iSD85NqgmyFbDeH4k1SNzfq3qomXk:zScYwxgivHAlbd6yAwe0iZ5AgmyFbKHt

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1240	448	WerFault.exe	85

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
448	2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39.exe
448	2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39.exe

C:\Users\Admin\AppData\Local\Temp\2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39.exe
"C:\Users\Admin\AppData\Local\Temp\2d9bac90f8ebfd1a4ded74d7bc5d513c68754fed50896eed7a015f024a015e39.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:448
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 448 -s 652
  2⤵
  - Program crash
  PID:1240

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 448 -ip 448
1⤵
PID:2632