c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082

Analysis

max time kernel
193s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 19:40

Target

c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe
Size

436KB
MD5

25bb30c3cc364e8470b2e7a662005b19
SHA1

81292b15c82ea52607d34b1ea7be7bc14b4e40cc
SHA256

c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082
SHA512

f39fe5eff92475747362d0c0cff92e84b2143888758c600badfc0e76841d6060861e9b8e1ea5829a35b4c68a79072beed140b6e25a4addb37d99f2dc7687af16
SSDEEP

6144:bIJrUosyu3TjHNLmOlw+ewCXL0JXX8lGklD0LH9tYkIHA7fp2l4wX+ZGg3BPstP:bI5UiuDjtaFLOXQDYtp0Y2W1Qq4

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2284 1524 WerFault.exe c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe

pid process

1524 c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe

pid	pid_target	process	target process
2284	1524	WerFault.exe	c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe

pid	process
1524	c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe

C:\Users\Admin\AppData\Local\Temp\c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe
"C:\Users\Admin\AppData\Local\Temp\c32148c38b5a20a2d82637f71880c6d09af043dc32b5f3ac3eef557b877ab082.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1524 -s 892
2⤵
- Program crash
PID:2284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1524 -ip 1524
1⤵
PID:1380

memory/1524-132-0x0000000002F00000-0x0000000002F06000-memory.dmp

Filesize
24KB

Download
memory/1524-133-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download