85cb565aba61c39ecf383bb70128742d92e0f48997860fd6a15f2749d7bd7e69

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2022 16:52

Target

VCE1.0.2（软件会提示升级，勿升级）/player.exe
Size

7.1MB
MD5

5a3b3c3902f526a017c0edc32d6dd3dd
SHA1

b1b366deec4cf1c116f2f83b18eff416271e6493
SHA256

7f51353a7482ce109c07c3678762fc3f2ac11243998662a8bab235441f6839dd
SHA512

f9fd0fe44cb71b1aea1a5f4a388da6d435dd90e302a2c22e06d883ae4a966dfdff9a628d1c1e82d22571ea3728b15ec75f13399e7ef69382328a40a740287acd
SSDEEP

98304:rMX5S1okYvX6l+d8EgGpkn4/wa/kwnSibkVqjyL4m3D+iVEXZ8G9Rhjnhym3iqMx:r4YokYPOEgGpkyXIm3iBzT

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

player.exe

pid process

5024 player.exe
5024 player.exe

pid	process
5024	player.exe
5024	player.exe

C:\Users\Admin\AppData\Local\Temp\VCE1.0.2（软件会提示升级，勿升级）\player.exe
"C:\Users\Admin\AppData\Local\Temp\VCE1.0.2（软件会提示升级，勿升级）\player.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5024