7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99

Analysis

max time kernel
91s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2022 14:56

Target

7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe
Size

72KB
MD5

44154c081d16a85f56623e85a2f36625
SHA1

47c3e8d8770c3afdeec56a4db45c272dec9b2015
SHA256

7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99
SHA512

5c2de9c41c4804f9ac53ce01982b85e730a1fdb961e1ca683b9d13f08ef0046dd5f4c4abb917233270c58f52788102dd22f0e5d461460d0e0438f80d0fb4ef40
SSDEEP

1536:Uu+hjRou5tGEK9cuYtWhiuRxYnc8O+jnLik4:Uu+WhiuRxYcsnr4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4860	2060	WerFault.exe	78

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2060	7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe

C:\Users\Admin\AppData\Local\Temp\7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe
"C:\Users\Admin\AppData\Local\Temp\7f78ef94b6e51a1462a96f1d4bfbe08de2fd4fd5d70a0e0cb7d45a0bab97fa99.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2060
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2060 -s 752
  2⤵
  - Program crash
  PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2060 -ip 2060
1⤵
PID:4968