37d7abc72670b0663a2a4b57ea63666a1a9db692b8b4e16f54df1a4861c31148

Analysis

max time kernel
142s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2023, 20:01

Target

37d7abc72670b0663a2a4b57ea63666a1a9db692b8b4e16f54df1a4861c31148.exe
Size

31KB
MD5

e6f032bf12337778941cf871f77c1e95
SHA1

133ae1da29e38d66aebb31230641d2d0b78ff445
SHA256

37d7abc72670b0663a2a4b57ea63666a1a9db692b8b4e16f54df1a4861c31148
SHA512

edc7b8205c8a003a117eb759facac2380c1460192c888c1b607f0042bb44e5768c408fe1e2a4e85b91fb53860d34aa1e86b337c1dcd3999f37ac368fc4ecf2ab
SSDEEP

384:EIcXYGgT7/ERx6cxfjA1OsKWVyWoHteMD6:EItTbEG8fj6TyY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3996	1056	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1056	37d7abc72670b0663a2a4b57ea63666a1a9db692b8b4e16f54df1a4861c31148.exe

C:\Users\Admin\AppData\Local\Temp\37d7abc72670b0663a2a4b57ea63666a1a9db692b8b4e16f54df1a4861c31148.exe
"C:\Users\Admin\AppData\Local\Temp\37d7abc72670b0663a2a4b57ea63666a1a9db692b8b4e16f54df1a4861c31148.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1056 -s 396
  2⤵
  - Program crash
  PID:3996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1056 -ip 1056
1⤵
PID:3196