fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2022 03:45

Target

fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d.exe
Size

201KB
MD5

58a112ce5cc23abef38eaf0ff9c6a7a6
SHA1

55112c283a850c39268c3b3fe891f50fefddd33b
SHA256

fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d
SHA512

46352d4a34477fe3fae49e0633b10051e9ec6d8407fe88e8d7564765e305689caf6d7a08f1e1bb20689422432f8b2a78b058cd731e4a4fb01818549bbade3bc6
SSDEEP

6144:Hza2Nj+MLxwkcWTq/81DDiSTz9nqEja3TXU0xtFq:HqEjk7l7Fq

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4912	3124	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3124	fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d.exe

C:\Users\Admin\AppData\Local\Temp\fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d.exe
"C:\Users\Admin\AppData\Local\Temp\fc7434365089fdc62841327964d7543d517de3cdd9aad6deae2ca3b77fadc18d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3124
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3124 -s 464
  2⤵
  - Program crash
  PID:4912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3124 -ip 3124
1⤵
PID:4880