13be116405b281b30545cc2c28c1ee4b41ea6bc7faf9ee354bd53b06b7a43170

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 00:49

Target

1e2ef2a54ce425160b1d276598138f04.exe
Size

520KB
MD5

1e2ef2a54ce425160b1d276598138f04
SHA1

28a3653f77ae8a96f13c83933666ca31736c4776
SHA256

13be116405b281b30545cc2c28c1ee4b41ea6bc7faf9ee354bd53b06b7a43170
SHA512

1cf9e0b0957a581302ee5a87ec7c1b81184009cc99cebdfeee62b839da3c5d069f6486c96afbc0de7aa190fe1faa40d1fd9c362651cea1646afbe07ec344b644
SSDEEP

12288:szr84F5YjdQ4ltbwj796SId1y6bjcW26V/eiMt8+a:sP8sYZQwtbwEddQ2a6Vma+

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4608	3124	WerFault.exe	16

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3124	1e2ef2a54ce425160b1d276598138f04.exe

C:\Users\Admin\AppData\Local\Temp\1e2ef2a54ce425160b1d276598138f04.exe
"C:\Users\Admin\AppData\Local\Temp\1e2ef2a54ce425160b1d276598138f04.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3124
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3124 -s 464
  2⤵
  - Program crash
  PID:4608

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3124 -ip 3124
1⤵
PID:4316