fbb3e949fde50e801605f95c525a6224e7f511f337454bde0398b8c7348855c8

Analysis

max time kernel
178s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-11-2022 11:10

Target

fbb3e949fde50e801605f95c525a6224e7f511f337454bde0398b8c7348855c8.exe
Size

160KB
MD5

121f038be8dfac6b950b174fc26a9d76
SHA1

4c410ecee684867c55281d9e28b1ff4843378a26
SHA256

fbb3e949fde50e801605f95c525a6224e7f511f337454bde0398b8c7348855c8
SHA512

6109d0e1c252e1e116a16624c92f3bcff4839e7b0fa1399a13e45ddd0ca946f5b1387882dac69a5198d166081a07ad4ebdec4cf48a3ebd5318570837439a2620
SSDEEP

1536:F+gDbKlmyJKz5jR7766dxocisPfDsCUjhe+SPBp9oEoTTLgY++++1sY+++++ZDdM:FxbkuVbvLn7Uj3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1656	2648	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2648	fbb3e949fde50e801605f95c525a6224e7f511f337454bde0398b8c7348855c8.exe

C:\Users\Admin\AppData\Local\Temp\fbb3e949fde50e801605f95c525a6224e7f511f337454bde0398b8c7348855c8.exe
"C:\Users\Admin\AppData\Local\Temp\fbb3e949fde50e801605f95c525a6224e7f511f337454bde0398b8c7348855c8.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2648 -s 464
  2⤵
  - Program crash
  PID:1656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2648 -ip 2648
1⤵
PID:4804

memory/2648-134-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/2648-135-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download