d38c16ae590bde483d457875fec09bac9de07c9ef6946bccd7ba4b64d2379390

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231130-en
resource tags

arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
submitted
11/12/2023, 08:14

Target

d38c16ae590bde483d457875fec09bac9de07c9ef6946bccd7ba4b64d2379390.exe
Size

76KB
MD5

830620fcf55bce2deb9a56489b7f9d0e
SHA1

5336f76d2063d7e4462257256526f06cea372e03
SHA256

d38c16ae590bde483d457875fec09bac9de07c9ef6946bccd7ba4b64d2379390
SHA512

c2a0dbb799f26399dba0cbffd1d2fffd794c59549ed6343af29b47924e64e6738fb7c954d17010ecfb7ccbf23fa07b795e197feee1abbf51cf1e4dc727fe951d
SSDEEP

1536:bJGkZ7DMyPiYOEb7vm1ZVXD4V/dbSmZFjn8S8QwU:tGkZXrPiYx7v8HyEmZyS83U

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1184	2708	WerFault.exe	57

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2708	d38c16ae590bde483d457875fec09bac9de07c9ef6946bccd7ba4b64d2379390.exe

C:\Users\Admin\AppData\Local\Temp\d38c16ae590bde483d457875fec09bac9de07c9ef6946bccd7ba4b64d2379390.exe
"C:\Users\Admin\AppData\Local\Temp\d38c16ae590bde483d457875fec09bac9de07c9ef6946bccd7ba4b64d2379390.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2708
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2708 -s 424
  2⤵
  - Program crash
  PID:1184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2708 -ip 2708
1⤵
PID:692