3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad

Analysis

max time kernel
179s
max time network
229s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:31

Target

3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe
Size

152KB
MD5

0b7d22692603f08c0241f7945cfc8140
SHA1

affcb08e2123a68e2bb79bdc826b0c010e6faaf6
SHA256

3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad
SHA512

eb4e5f9cd57ea8436f6d3a198079327ef3293d9e2a09d7bd395e491978976059d62fd9660285ebe22d2633260bfa43643f6d479eed43ca77b9dab27f83ac176c
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3464 4856 WerFault.exe 3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe

pid process

4856 3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe

pid	pid_target	process	target process
3464	4856	WerFault.exe	3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe

pid	process
4856	3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe

C:\Users\Admin\AppData\Local\Temp\3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe
"C:\Users\Admin\AppData\Local\Temp\3012f0534f7547e858c6ece420cfc649bdc542edc713db5d0891a8e2821d4fad.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4856 -s 464
2⤵
- Program crash
PID:3464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4856 -ip 4856
1⤵
PID:1576