78579db3f4d851db6b6275b4a9106bf2221c693beda73dff4e7781f93d3c4970

Analysis

max time kernel
90s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 23:16

Target

78579db3f4d851db6b6275b4a9106bf2221c693beda73dff4e7781f93d3c4970.exe
Size

30KB
MD5

146003e66487e545d2d0844a36013780
SHA1

5946564c2599d654e49602ddabe8f2a6679d6a16
SHA256

78579db3f4d851db6b6275b4a9106bf2221c693beda73dff4e7781f93d3c4970
SHA512

21c3e41aea2059391c82dad604c45420caf53a2d180ebdfdb9ac08e8f7c26c619ce52477ef37f84d295b73288b85781928322b64c7efcf2de0ce2893fb19d099
SSDEEP

768:p6/msh1toK5LqUXD/uCaVhifk6JzvrM+/c:p6Xh1iKoYzkMz4+k

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2960	3488	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3488	78579db3f4d851db6b6275b4a9106bf2221c693beda73dff4e7781f93d3c4970.exe

C:\Users\Admin\AppData\Local\Temp\78579db3f4d851db6b6275b4a9106bf2221c693beda73dff4e7781f93d3c4970.exe
"C:\Users\Admin\AppData\Local\Temp\78579db3f4d851db6b6275b4a9106bf2221c693beda73dff4e7781f93d3c4970.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3488
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3488 -s 664
  2⤵
  - Program crash
  PID:2960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3488 -ip 3488
1⤵
PID:2164