8f81e670133b8d6bb2dd47762b7243688edfea15cbff14f874da141a00dccf4f

Analysis

max time kernel
213s
max time network
229s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 13:24

Target

8f81e670133b8d6bb2dd47762b7243688edfea15cbff14f874da141a00dccf4f.exe
Size

1.1MB
MD5

5eb261ce3b29224759012e4d65fdc3a3
SHA1

8d2823ea48cfd0db2c32fc1a592a63269f082db0
SHA256

8f81e670133b8d6bb2dd47762b7243688edfea15cbff14f874da141a00dccf4f
SHA512

08a55339dbe151f813b274fe5730311a21b87d523b5f0606695563330264a06e4de155609c5e0d04e7a7de68d3ea782b873297fe5372c5b52b377b09d165c8df
SSDEEP

12288:VN1X1JFfRCF5gZWg+s/vfqRTvmKMkNQ84oSByYMRBLewngb/RAgrFo/umM/Z8rsu:ZX1JFTog+sfqgXCQ8LqZw6/ZF0A8P

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3188	2752	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2752	8f81e670133b8d6bb2dd47762b7243688edfea15cbff14f874da141a00dccf4f.exe

C:\Users\Admin\AppData\Local\Temp\8f81e670133b8d6bb2dd47762b7243688edfea15cbff14f874da141a00dccf4f.exe
"C:\Users\Admin\AppData\Local\Temp\8f81e670133b8d6bb2dd47762b7243688edfea15cbff14f874da141a00dccf4f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2752
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2752 -s 468
  2⤵
  - Program crash
  PID:3188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2752 -ip 2752
1⤵
PID:4384

memory/2752-132-0x0000000000400000-0x000000000050D000-memory.dmp

Filesize
1.1MB

Download
memory/2752-135-0x0000000000400000-0x000000000050D000-memory.dmp

Filesize
1.1MB

Download
memory/2752-136-0x0000000000400000-0x000000000050D000-memory.dmp

Filesize
1.1MB

Download