08b7ff1d079db0c88250ea8d2dc88dc8de640771508c4d3f1389334581e517bf

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 05:35

Target

0865375e684c09ddf25f879e2aa45445.exe
Size

964KB
MD5

0865375e684c09ddf25f879e2aa45445
SHA1

82cdc4ef65f90e8fb160aba188ae88c4353a9f5f
SHA256

08b7ff1d079db0c88250ea8d2dc88dc8de640771508c4d3f1389334581e517bf
SHA512

cbfdfed0b55e05215e61c29c84c7a81a2431cb85cadb9dfa664ef3e83ca30b39e015ce28fa303202baa0c01eacc951e592ff8c6e417650625c108e3785312998
SSDEEP

24576:HNDtgSt8ux/FI5QhM5BtON/X5aP/SdqJyybYfxk/5GFaidS0:XjImitOWXSdSrbjz

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5032	4292	WerFault.exe	16

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4292	0865375e684c09ddf25f879e2aa45445.exe

C:\Users\Admin\AppData\Local\Temp\0865375e684c09ddf25f879e2aa45445.exe
"C:\Users\Admin\AppData\Local\Temp\0865375e684c09ddf25f879e2aa45445.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4292
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 500
  2⤵
  - Program crash
  PID:5032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4292 -ip 4292
1⤵
PID:4812