87c3909612fca9cd18ee8e6bc0b933a142df7d92be613ccf11f981a16fa87b8d

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 02:02

Target

87c3909612fca9cd18ee8e6bc0b933a142df7d92be613ccf11f981a16fa87b8d.exe
Size

92KB
MD5

fe07d19ef12edc9b7f52c423d883c79c
SHA1

388a73481950604bb32cd80908db8ee529d45999
SHA256

87c3909612fca9cd18ee8e6bc0b933a142df7d92be613ccf11f981a16fa87b8d
SHA512

6043b6ec755ae6b75ebfd4d54d83d5f16473aaa13097f25f32531cf96ea0dbc3b7f1c1d095eb7c05115bda1374e04c36c35fa32fc83771eeff4479a43e8eadc5
SSDEEP

1536:sStuzZStGbT5XZCcdjcUtxfb3SbWtuF/nW3:uVJbTdZCcdjnthb3SbEuF/nW3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4968	3564	WerFault.exe	80

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3564	87c3909612fca9cd18ee8e6bc0b933a142df7d92be613ccf11f981a16fa87b8d.exe

C:\Users\Admin\AppData\Local\Temp\87c3909612fca9cd18ee8e6bc0b933a142df7d92be613ccf11f981a16fa87b8d.exe
"C:\Users\Admin\AppData\Local\Temp\87c3909612fca9cd18ee8e6bc0b933a142df7d92be613ccf11f981a16fa87b8d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3564
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3564 -s 816
  2⤵
  - Program crash
  PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3564 -ip 3564
1⤵
PID:4992

memory/3564-132-0x0000000010000000-0x0000000010011000-memory.dmp

Filesize
68KB

Download