1fc26771866526cb19293f19ffde11fe9c833b336cc67af89160607e0f5eb5d5

Analysis

max time kernel
181s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2022 16:09

Target

1fc26771866526cb19293f19ffde11fe9c833b336cc67af89160607e0f5eb5d5.exe
Size

160KB
MD5

0816c0b45add832e917dfe70fbd048af
SHA1

522d686ebff5e9075cbc4e2c6e39869fbc8a7e50
SHA256

1fc26771866526cb19293f19ffde11fe9c833b336cc67af89160607e0f5eb5d5
SHA512

db80cecb7e6ac2348aebf33b33883b39b883768872bf7bdcf72736a4ef8b507b392b20356fab0e835bdbb263eb078f269cdee50c12e122fa786f11337cf933d4
SSDEEP

1536:F+gDbKlmyJKz5jR7766dxocisPfDsCUjhe+SPBp9oEoTTLgY++++1sY+++++ZDdM:FxbkuVbvLn7Uj3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4688	4460	WerFault.exe	79

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4460	1fc26771866526cb19293f19ffde11fe9c833b336cc67af89160607e0f5eb5d5.exe

C:\Users\Admin\AppData\Local\Temp\1fc26771866526cb19293f19ffde11fe9c833b336cc67af89160607e0f5eb5d5.exe
"C:\Users\Admin\AppData\Local\Temp\1fc26771866526cb19293f19ffde11fe9c833b336cc67af89160607e0f5eb5d5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4460
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4460 -s 464
  2⤵
  - Program crash
  PID:4688

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4460 -ip 4460
1⤵
PID:1204

memory/4460-134-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/4460-135-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download