fe16cdb49a88879a39ea712d9f0f21a202c1bc0726533bdce3a3968b27a679bb

Analysis

max time kernel
135s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 00:53

Target

fe16cdb49a88879a39ea712d9f0f21a202c1bc0726533bdce3a3968b27a679bb.exe
Size

208KB
MD5

090e3de44d978cb66605df619fbc6e60
SHA1

703f909d060ca10ec26a6047d82a8dd6fd242a38
SHA256

fe16cdb49a88879a39ea712d9f0f21a202c1bc0726533bdce3a3968b27a679bb
SHA512

69891e99fb68a1e25cb793458119bb568e307d180578af34a6ed5cbc3af1391f0bf4a67b92b575ffcf2439314db0369a5bc43323035a0271d3c424def41f5f42
SSDEEP

1536:Vfuxw10lxJM5y8w5OZRVmgyDl+cWaxJcveQZNTRSb3EBAR1AlQPsxjheYhpXN5yh:f0OtF2Qo7VsJgisxlYegEX0ZZbW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1440	4920	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4920	fe16cdb49a88879a39ea712d9f0f21a202c1bc0726533bdce3a3968b27a679bb.exe

C:\Users\Admin\AppData\Local\Temp\fe16cdb49a88879a39ea712d9f0f21a202c1bc0726533bdce3a3968b27a679bb.exe
"C:\Users\Admin\AppData\Local\Temp\fe16cdb49a88879a39ea712d9f0f21a202c1bc0726533bdce3a3968b27a679bb.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4920
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 464
  2⤵
  - Program crash
  PID:1440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4920 -ip 4920
1⤵
PID:2836