cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e

Analysis

max time kernel
189s
max time network
194s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 15:57

Target

cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe
Size

160KB
MD5

5252da12e78d0ddf6131eb57f46793a0
SHA1

15e4dc28fd6638077333b7c319d30a0d8c36bbb3
SHA256

cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e
SHA512

b9abc6334ce99d0cecbc349273ec7e40d174a5205ea20e59bc3047073c26b5958556befa175dd74ba85fb29d9131ad110708694b38af1fd2d59b4028018e15a5
SSDEEP

3072:Va5Xf+DxG95Fbr2IsJ03CwLYwR49hPLd3BzK02Swq4lV34oQZiEV2P:k5v+DmbrTw03rLlR4PLnh7w1rZWC

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3000 1108 WerFault.exe cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe

pid process

1108 cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe

pid	pid_target	process	target process
3000	1108	WerFault.exe	cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe

pid	process
1108	cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe

C:\Users\Admin\AppData\Local\Temp\cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe
"C:\Users\Admin\AppData\Local\Temp\cfd89c730aab2a71923c100123b69684f8891295799332eb47f7339d58b4b58e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1108 -s 464
  2⤵
  - Program crash
  PID:3000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1108 -ip 1108
1⤵
PID:1232

memory/1108-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/1108-135-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download