ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514

Analysis

max time kernel
191s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 00:21

Target

ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe
Size

220KB
MD5

361eb96e3b0e205b7a3a28292be59eb7
SHA1

e4a101712de4948ca8177d5afc5e008a2228dbf1
SHA256

ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514
SHA512

68c92b0577a6697a44aa137242dd91a61d7ed9d701fe116ddef5d350606e70732696d965d13ce6db4acb28846f67aa8a2c9db2666af43e1c5bf6494465705057
SSDEEP

1536:EJNhjI6QkgaFzpImdqkh5LAVqHu+JrpOJUA1K14yUsuExlAyRzuAwamaIcI98MS6:ANJIKhFzSKFh5LA+JrpJerYlqqILGEiw

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

176 4192 WerFault.exe ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe

pid process

4192 ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe

pid	pid_target	process	target process
176	4192	WerFault.exe	ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe

pid	process
4192	ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe

C:\Users\Admin\AppData\Local\Temp\ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe
"C:\Users\Admin\AppData\Local\Temp\ca0c1adcfcbe80c5fd6dc2e231a83865639b1d6f600c4a38cbb32eac9bd44514.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4192

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4192 -s 692
2⤵
- Program crash
PID:176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4192 -ip 4192
1⤵
PID:224