08ed029059da8e9f2df3e46cd457e885cce4138c99cf5b0e06be13d3229a5464

Analysis

max time kernel
138s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31-12-2023 05:32

Target

2a20034c5f712a6d07a2044c50d155cd.exe
Size

24KB
MD5

2a20034c5f712a6d07a2044c50d155cd
SHA1

674bb0563dd54b2bfb10a580cc671cf1b5db9ffe
SHA256

08ed029059da8e9f2df3e46cd457e885cce4138c99cf5b0e06be13d3229a5464
SHA512

f5ca5318d3f02801ec53893dff1a9904d1860f037a6ae6fad0f93074811b5307692e304f56a1b2bc0a34e3e0a03d53e60d401a4f75a767e9b2feac208de16d2f
SSDEEP

192:7qDrYBnvm8GXZG7jPXYr4P0pVL2O5owHR/iYbmgapLPDK047N:70w7GXZG7mbiVppLPDK047

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4252	4188	WerFault.exe	17

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4188	2a20034c5f712a6d07a2044c50d155cd.exe

C:\Users\Admin\AppData\Local\Temp\2a20034c5f712a6d07a2044c50d155cd.exe
"C:\Users\Admin\AppData\Local\Temp\2a20034c5f712a6d07a2044c50d155cd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4188
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4188 -s 476
  2⤵
  - Program crash
  PID:4252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4188 -ip 4188
1⤵
PID:3680