c32550c087e49d116d1152bd1b709739e2d9bbfad72c66d1fbe9ccdf38b87524

Analysis

max time kernel
7s
max time network
10s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
21-07-2023 17:04

Target

gmcl_joystick_win64.dll
Size

102KB
MD5

61b432406d48b18b0b7a81e4c9f06053
SHA1

bc3534547fb83b624e14d890df932ced8f20ae82
SHA256

c32550c087e49d116d1152bd1b709739e2d9bbfad72c66d1fbe9ccdf38b87524
SHA512

3a02f0065301978f2bdbdb171c2706aaee24c6ee02e132fc1ab8b693d9bad040d8b82ae5f496da03937db8062f8835b0fa46043eea483a6d80cb87914ee4168a
SSDEEP

1536:A/H+TkSAfJJHU4SKsSuV9Z+FZVU0Ab0v6XMsWyd09dlyaBHH33VRt:sHUkSAf/UEsHV/+FZVU0lCXdM0Azt

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1916	2264	WerFault.exe	20

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2264	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\gmcl_joystick_win64.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:2264
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2264 -s 520
  2⤵
  - Program crash
  PID:1916

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 368 -p 2264 -ip 2264
1⤵
PID:660