851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f

Analysis

max time kernel
124s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 09:47

Target

851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f.exe
Size

89KB
MD5

47e471f03af82c1fcbfc1e4f53c83f04
SHA1

0e20383dbf6706f323a848f9d9e040263cde6e04
SHA256

851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f
SHA512

5e7efd55b8e7ba9d4e2b5956647c1d80e43e0a69a8af7435a7a90f6aec65dd101da28a633d434898f91e64be669a9c9de014cf10f0f7c8cde233837b9d0dd033
SSDEEP

1536:MP5bE0bFOKraGkFIQlxBA/qGOtr8g6Xreccr:MBY0bFOKrojGWr8g67O

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1704	5056	WerFault.exe	81

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5056	851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f.exe
5056	851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f.exe

C:\Users\Admin\AppData\Local\Temp\851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f.exe
"C:\Users\Admin\AppData\Local\Temp\851b5657e437898b98650270287bc44bc4938e33ea50c1dce3f775a8eeec9c8f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5056
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 780
  2⤵
  - Program crash
  PID:1704

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5056 -ip 5056
1⤵
PID:2744

memory/5056-132-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/5056-135-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download