004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be

Analysis

max time kernel
107s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2023 19:50

Target

004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe
Size

4.2MB
MD5

dcf024016497be1db9e82e150b4fbd9b
SHA1

093bd1735140cd9218797d31e817346ac31a6d80
SHA256

004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be
SHA512

b03a212b7aadf7720c3b43fc3a8e8464dc73db256fbf8e3060dc5182490c342e9b867c1cd98309e34418b6ea41bbbc0f6fde002a0f7b660174a43c6ad0ecc724
SSDEEP

98304:gkFi6n5Vc1QInIps/n7kxYrQXHp/mw9hpDfpOeFiHxp/m2DGmH:gkFi6n5Slx7knmspDfpviRpz

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1064 1704 WerFault.exe 004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe

pid	pid_target	process	target process
1064	1704	WerFault.exe	004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe

pid	process
1704	004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe
1704	004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe
1704	004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe

C:\Users\Admin\AppData\Local\Temp\004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe
"C:\Users\Admin\AppData\Local\Temp\004c6a4e8ab1e58556dd0e62cdfbfad9ce82f7e7a9705c44258457c585d4e7be.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1704

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1704 -s 936
2⤵
- Program crash
PID:1064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1704 -ip 1704
1⤵
PID:3432

memory/1704-132-0x0000000000400000-0x000000000100B000-memory.dmp

Filesize
12.0MB

Download
memory/1704-133-0x0000000000400000-0x000000000100B000-memory.dmp

Filesize
12.0MB

Download
memory/1704-134-0x0000000000400000-0x000000000100B000-memory.dmp

Filesize
12.0MB

Download
memory/1704-135-0x0000000000400000-0x000000000100B000-memory.dmp

Filesize
12.0MB

Download
memory/1704-137-0x0000000000400000-0x000000000100B000-memory.dmp

Filesize
12.0MB

Download
memory/1704-138-0x0000000002ED0000-0x0000000003010000-memory.dmp

Filesize
1.2MB

Download
memory/1704-139-0x0000000002ED0000-0x0000000003010000-memory.dmp

Filesize
1.2MB

Download
memory/1704-140-0x0000000002ED0000-0x0000000003010000-memory.dmp

Filesize
1.2MB

Download
memory/1704-141-0x0000000002ED0000-0x0000000003010000-memory.dmp

Filesize
1.2MB

Download
memory/1704-142-0x0000000002ED0000-0x0000000003010000-memory.dmp

Filesize
1.2MB

Download
memory/1704-143-0x0000000002ED0000-0x0000000003010000-memory.dmp

Filesize
1.2MB

Download
memory/1704-144-0x0000000000400000-0x000000000100B000-memory.dmp

Filesize
12.0MB

Download