2fb4ab57d2b717a2e64c78b4cb07992ae95860fa88a51787f814151302fd530b

Analysis

max time kernel
2s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
05/07/2023, 18:29

Target

2fb4ab57d2b717a2e64c78b4cb07992ae95860fa88a51787f814151302fd530b.exe
Size

340KB
MD5

beb9430eb7a427a4895069f6f41b9e26
SHA1

9172878b6769ddb208053d8a813b396c6fb5e57a
SHA256

2fb4ab57d2b717a2e64c78b4cb07992ae95860fa88a51787f814151302fd530b
SHA512

1343394c511282815b6b20f8afa5c89f583697a7079d9ea890d9e3d1cb9f85f12d465a71d0175ff7d2b2ed8d49cf605d16d6382aea6cc3a183d19ffdbabb0f06
SSDEEP

6144:yW4fmSkAHMOWVWGn3khp/d1b8RSi3f/7fYdSGYnhXDkjbEPNL:CGOX3d1MvfTEfEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4808	776	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
776	2fb4ab57d2b717a2e64c78b4cb07992ae95860fa88a51787f814151302fd530b.exe

C:\Users\Admin\AppData\Local\Temp\2fb4ab57d2b717a2e64c78b4cb07992ae95860fa88a51787f814151302fd530b.exe
"C:\Users\Admin\AppData\Local\Temp\2fb4ab57d2b717a2e64c78b4cb07992ae95860fa88a51787f814151302fd530b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:776
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 776 -s 508
  2⤵
  - Program crash
  PID:4808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 776 -ip 776
1⤵
PID:4032

memory/776-133-0x0000000000400000-0x0000000000489000-memory.dmp

Filesize
548KB

Download
memory/776-134-0x0000000000400000-0x0000000000489000-memory.dmp

Filesize
548KB

Download