3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e

Analysis

max time kernel
148s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 16:51

Target

3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe
Size

33KB
MD5

53c40873b2a9a05eeffaca7c1e5762d0
SHA1

684bef0bbcdf21b01d070aeb257d093cde81cf93
SHA256

3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e
SHA512

e18ddd4921395939a40fc1dada05818c5d6416120387861d1144a29dcab921c5203f685c2c342e7efb03ff9ab0d70a9ee6f805da3d7c527d2c335bf8882a113e
SSDEEP

384:Z23IquqgdVRpDpUgqsJGE2bh0nCWSynIxLT6aXLA0JvOfEdSIELThU:g3IquqeVflWsCbkIL+mAe4EkTL+

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3056 1084 WerFault.exe 3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe

pid process

1084 3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe

pid	pid_target	process	target process
3056	1084	WerFault.exe	3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe

pid	process
1084	3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe

C:\Users\Admin\AppData\Local\Temp\3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe
"C:\Users\Admin\AppData\Local\Temp\3b55c5c1fdc9d6a83ddc92c7df1fa54c80ad995c8a7bb459f241866e1cbd679e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 468
2⤵
- Program crash
PID:3056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1084 -ip 1084
1⤵
PID:980