c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70

Analysis

max time kernel
190s
max time network
187s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 16:53

Target

c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe
Size

148KB
MD5

2cb43d516eebef4a7c355129c6f4a5bf
SHA1

221dc21c7f3169be765267f32ab13daa82b2a08f
SHA256

c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70
SHA512

7ebeb18f21b7c1e75a8427e08222424e902891c93f4b01f8c37e473920bdb5026e41b8b4ef41ce0b43cdc24c186b8afe920cb8be0db1211f07788046d0f45606
SSDEEP

3072:e+j2ISsL6X74Ox/Kg8r4JOLG+Zqfn9g0dQ8glVMr:O06XsOx/Kg8QOLGY+9gsHmOr

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4916 5044 WerFault.exe c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe

pid process

5044 c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe

pid	pid_target	process	target process
4916	5044	WerFault.exe	c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe

pid	process
5044	c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe

C:\Users\Admin\AppData\Local\Temp\c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe
"C:\Users\Admin\AppData\Local\Temp\c441169c80ad3b81db4424b3613807015b92514981f330aef05c763841d97d70.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 460
2⤵
- Program crash
PID:4916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5044 -ip 5044
1⤵
PID:3452

memory/5044-133-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/5044-135-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download