49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2022 06:48

Target

49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe
Size

152KB
MD5

0d3a48621f932ddd56aaa3328fd00b10
SHA1

0f1299d7f5081cd001c789d05f72b3392fac4b48
SHA256

49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520
SHA512

26e7725a50aa6bf266ccfedb04ed3cd0f55068f099b411bf559cb482351411625217a05699618253539cddd0af925b0c17c413928fadb0cb9a06ab87b12f0c1c
SSDEEP

1536:c1DMz1DQvXLq6t7awFONecenlLnQHIG5R9c73P600t:9eGw9A0rC00t

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4260 5100 WerFault.exe 49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe

pid process

5100 49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe

pid	pid_target	process	target process
4260	5100	WerFault.exe	49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe

pid	process
5100	49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe

C:\Users\Admin\AppData\Local\Temp\49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe
"C:\Users\Admin\AppData\Local\Temp\49b12c885335bfb17e2b4843a7a1fc646165aecca575f4532a9fc9a824c9b520.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 464
2⤵
- Program crash
PID:4260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5100 -ip 5100
1⤵
PID:4384