2aade20dce5b9cefa727322ab2029ad0c7105a7c2d866d3d108344962002b2e4

Analysis

max time kernel
135s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2024 09:33

Target

71dfac62b95a6849ffb0a26ff86d9020.exe
Size

32KB
MD5

71dfac62b95a6849ffb0a26ff86d9020
SHA1

5f575796d6b90360289ad55fe8ea9d60f3c3b0ee
SHA256

2aade20dce5b9cefa727322ab2029ad0c7105a7c2d866d3d108344962002b2e4
SHA512

42c8bd0bee6abe2e77114af34eb3031495dd0478961b472324969acb8918f8e6a3912341083f62f72fe3ef5098585de7ff0c64cebe2fedcd83f2dabc93fe9e0f
SSDEEP

384:gMj4fzgxvPqTOFirFqTabCMUxDk2ieB7Hq7ZtkD4m4wRvAeA3NHH2hS4wkk0K0MG:6yyTWFTyCMkk+D4rwRvfWtWcbkPKi/

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1732	1372	WerFault.exe	85

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1372	71dfac62b95a6849ffb0a26ff86d9020.exe

C:\Users\Admin\AppData\Local\Temp\71dfac62b95a6849ffb0a26ff86d9020.exe
"C:\Users\Admin\AppData\Local\Temp\71dfac62b95a6849ffb0a26ff86d9020.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1372
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 464
  2⤵
  - Program crash
  PID:1732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1372 -ip 1372
1⤵
PID:4384

memory/1372-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1372-3-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1372-4-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download