c2264b5f6618f489ec75c619edd4f2dd057178031904d72249dc81fbd1682c88

Analysis

max time kernel
167s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 22:37

Target

c2264b5f6618f489ec75c619edd4f2dd057178031904d72249dc81fbd1682c88.exe
Size

2.9MB
MD5

91401118d4a8cc81c7345e409b3c5bd1
SHA1

e547819adf1836e947e128706827cf26793edac3
SHA256

c2264b5f6618f489ec75c619edd4f2dd057178031904d72249dc81fbd1682c88
SHA512

727a92f7d3ba834fa9f8b2229f4b05b67efb1d5cf9290e01fb70e17714e0020f53466d4bc9e10858561e81f1f153950d2e9e70b68ce8e14325b56c5fd4162f3f
SSDEEP

49152:UypKlzcau8VZqbgRe1xm7fgFKvc4clwYFEwPX:UyAlzs8RwcvIX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2440	4752	WerFault.exe	77

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4752	c2264b5f6618f489ec75c619edd4f2dd057178031904d72249dc81fbd1682c88.exe

C:\Users\Admin\AppData\Local\Temp\c2264b5f6618f489ec75c619edd4f2dd057178031904d72249dc81fbd1682c88.exe
"C:\Users\Admin\AppData\Local\Temp\c2264b5f6618f489ec75c619edd4f2dd057178031904d72249dc81fbd1682c88.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4752
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4752 -s 576
  2⤵
  - Program crash
  PID:2440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4752 -ip 4752
1⤵
PID:4732

memory/4752-132-0x0000000000270000-0x0000000000535000-memory.dmp

Filesize
2.8MB

Download