134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1

Analysis

max time kernel
154s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 19:30

Target

134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1.exe
Size

160KB
MD5

14a43c0702a81207bdbd22761aaea451
SHA1

9da9b834dea2a7264594df45816c34e3398038a8
SHA256

134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1
SHA512

16131d4c2bea45f67ca385b220f33175a4ca6ff8a565cdda1c6b187cb97fc3dc827c4cdf2a1e186ba862c686413a7f4c326dd86a78d462fc0f20470256ea85d4
SSDEEP

1536:F+gDbKlmyJKz5jR7766dxocisPfDsCUjhe+SPBp9oEoTTLgY++++1sY+++++ZDdM:FxbkuVbvLn7Uj3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1708	4476	WerFault.exe	52

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4476	134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1.exe

C:\Users\Admin\AppData\Local\Temp\134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1.exe
"C:\Users\Admin\AppData\Local\Temp\134667eda244e0bdc151e0c969855fbe55d5af5db8f5e92acf6675d55085d1d1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4476 -s 464
  2⤵
  - Program crash
  PID:1708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4476 -ip 4476
1⤵
PID:5108

memory/4476-134-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/4476-135-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download