5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f

Analysis

max time kernel
112s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 17:05

Target

5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe
Size

224KB
MD5

43135da1f8f2a8ad38ad7c75493302b0
SHA1

7763d204c084a05172017ac520cbc50b94c848aa
SHA256

5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f
SHA512

ddc70fe43051bed1b4c2d3ef1df71ae58b1f331e38328f0cd6adf4c43ccdd9c06fb4dfcda81bcdf54c6e499a65fad7a4f5c05bee72a7b7eb9c9ad3167ecf021d
SSDEEP

3072:28GvGsZ5qbLj1w+A3W66NYa7CgPCmHV1BdHDYqzUnQUoulDu:2XLqvj1BA76HCgPCmHV1BdHDYoUZY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5028 2284 WerFault.exe 5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe

pid process

2284 5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe

pid	pid_target	process	target process
5028	2284	WerFault.exe	5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe

pid	process
2284	5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe

C:\Users\Admin\AppData\Local\Temp\5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe
"C:\Users\Admin\AppData\Local\Temp\5492dc707e35369caa36c877178165be3264d370b58e1d7bc1314efa9a68723f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 464
2⤵
- Program crash
PID:5028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2284 -ip 2284
1⤵
PID:5060