032c08d5fb67fe136eda1cf3b629130bbc1150c19d13351a5b69a9fad5217778

Analysis

max time kernel
135s
max time network
31s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 03:14

Target

032c08d5fb67fe136eda1cf3b629130bbc1150c19d13351a5b69a9fad5217778.exe
Size

98KB
MD5

e55a4ed116d52a7593e2e342b11de385
SHA1

d977c708fed2f928e931c38069eaf40a891b97cd
SHA256

032c08d5fb67fe136eda1cf3b629130bbc1150c19d13351a5b69a9fad5217778
SHA512

83adbc76de34265a061546d27f37f790dd6e13c36fe4c156d42c06fd84acbcbaf4c175c29816ddab9b97c844ef21eee4d0a099a21670877edd0e60241af619bd
SSDEEP

3072:PxCqMph5A6rYr2ITh0ralM4GgMYqUCVYs:StA6UijraaGM/UCms

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1104	3832	WerFault.exe	21
2020	3832	WerFault.exe	21

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3832	032c08d5fb67fe136eda1cf3b629130bbc1150c19d13351a5b69a9fad5217778.exe

C:\Users\Admin\AppData\Local\Temp\032c08d5fb67fe136eda1cf3b629130bbc1150c19d13351a5b69a9fad5217778.exe
"C:\Users\Admin\AppData\Local\Temp\032c08d5fb67fe136eda1cf3b629130bbc1150c19d13351a5b69a9fad5217778.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3832 -s 432
  2⤵
  - Program crash
  PID:1104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3832 -s 436
  2⤵
  - Program crash
  PID:2020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3832 -ip 3832
1⤵
PID:3208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3832 -ip 3832
1⤵
PID:4008

memory/3832-132-0x0000000000400000-0x0000000000402000-memory.dmp

Filesize
8KB

Download