4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-05-2023 10:51

Target

4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe
Size

770KB
MD5

93eb6f5432880150b60ba2adef2b8b09
SHA1

e7ba9c955d359d1c866a59aa213761b30fb95e99
SHA256

4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c
SHA512

ef18d98b1b5607af5bd8d46f75ce39bcee276f39926a66e5cf6d221f3c210bacc7c78f8586fff749859f089f4796b3a4a7ebd374493a215601970c06cb3c5f36
SSDEEP

12288:5ekAJuJcT5l3vILzwN8dikK3ngfZkw+nQLXbNLQHIIqvH1asguTIlk7VjCt5oNn:MkbKz3vKzH8zngxkdnMN6IHXIlk7sfY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4620 4416 WerFault.exe 4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe

pid	pid_target	process	target process
4620	4416	WerFault.exe	4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe

pid	process
4416	4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe
4416	4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe
4416	4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe
4416	4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe

C:\Users\Admin\AppData\Local\Temp\4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe
"C:\Users\Admin\AppData\Local\Temp\4e7fb04d97eac93e356940054c795082adab535ad7146f31ff996f5b32d4b20c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4416 -s 872
2⤵
- Program crash
PID:4620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4416 -ip 4416
1⤵
PID:3744

memory/4416-133-0x0000000000400000-0x0000000000649000-memory.dmp

Filesize
2.3MB

Download
memory/4416-134-0x0000000000400000-0x0000000000649000-memory.dmp

Filesize
2.3MB

Download
memory/4416-135-0x0000000000400000-0x0000000000649000-memory.dmp

Filesize
2.3MB

Download
memory/4416-136-0x0000000000400000-0x0000000000649000-memory.dmp

Filesize
2.3MB

Download