b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 02:06

Target

b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe
Size

184KB
MD5

704ee341121af4f340fc2c261182e90d
SHA1

4aefcc6273b54f4821bf186fcc1880a9142d8c6c
SHA256

b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9
SHA512

f795b915998d391206c7a2aeb5464e46adaa88124af24cd08c1a4f0bb073c03c414577553fb0f03d38660bde83f18f3f624bf0ac825aa6898736725af132d94e
SSDEEP

3072:tKuk2DoR3rQUrj0NXqrhpWopLvMqnviuy:tKoo6Oj0OhcopLEqnviu

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1616 3484 WerFault.exe b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe

pid process

3484 b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe

pid	pid_target	process	target process
1616	3484	WerFault.exe	b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe

pid	process
3484	b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe

C:\Users\Admin\AppData\Local\Temp\b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe
"C:\Users\Admin\AppData\Local\Temp\b39ed71c6b10bf72d839d066d94c5015c575bebc046e5256c7629522c2acafb9.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3484 -s 488
2⤵
- Program crash
PID:1616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3484 -ip 3484
1⤵
PID:5112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4252 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
1⤵
PID:3420