fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a

Analysis

max time kernel
91s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
22-11-2022 23:58

Target

fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a.exe
Size

288KB
MD5

ef3b4513c500ac327a3198716bc12e12
SHA1

ec3176119e22f29dc1ae21c5e58f4f6e1474f13b
SHA256

fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a
SHA512

336bcb2278cc7f9a025360cc46392b3a098daaa41dfa54de6d8ffd53c72e5aa418e4e27edb5725ff161470daa6060dc8ad5bbd3814bc25d911e6ffdb08841901
SSDEEP

6144:sqYG7QL5I69LMJ41QvhVix2nRk8Xcs7jyH:lcLKe4y1EVigR3nyH

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	Process	procid_target
1016	796	WerFault.exe	81
1152	796	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a.exe

pid	Process
796	fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a.exe

C:\Users\Admin\AppData\Local\Temp\fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a.exe
"C:\Users\Admin\AppData\Local\Temp\fe18eee04884625962311b2a2bfeb5b1df7554b9cbe3575bb3f937d64421c21a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:796
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 796 -s 516
  2⤵
  - Program crash
  PID:1016
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 796 -s 516
  2⤵
  - Program crash
  PID:1152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 796 -ip 796
1⤵
PID:2404

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 796 -ip 796
1⤵
PID:4492