9e017d9b3fe151aec3478c385ce6fe90359a3c02b26abae414b1e3a3a95362b9

Analysis

max time kernel
40s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 08:20

Target

HA_Animated_GIF_producer_V5.2_FULL_ata/未注册 (汉化版)/PRODUCER.exe
Size

2.3MB
MD5

8735a9bfd05d96d938399f351edb8151
SHA1

a3a15f355ecabdf23e65a95b5f787c6767299755
SHA256

06395d82a7c0dcb9f142cf12fd9ac4c4c5fa32df6cbdd4921799b360f07ac954
SHA512

4b0011e368973c8ae11cc941d2e26d1e5933756e0f63eac28a4aa890bcc60b422d3ab2ae91a889f601ef15b1cabac3fd586b0a3d8eeaedc7626d4389bb5cc85c
SSDEEP

49152:5G9g7WyzzRMey31Z1Gn9Gi283qae7s8v3wwiOB1Ox:5eHe2b3j4GJ8aaT8v3wwiOB1Ox

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

PRODUCER.exe

pid process

1248 PRODUCER.exe

pid	process
1248	PRODUCER.exe

C:\Users\Admin\AppData\Local\Temp\HA_Animated_GIF_producer_V5.2_FULL_ata\未注册 (汉化版)\PRODUCER.exe
"C:\Users\Admin\AppData\Local\Temp\HA_Animated_GIF_producer_V5.2_FULL_ata\未注册 (汉化版)\PRODUCER.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1248

memory/1248-54-0x0000000075351000-0x0000000075353000-memory.dmp

Filesize
8KB

Download
memory/1248-55-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1248-56-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1248-57-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1248-58-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1248-59-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1248-60-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1248-61-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download