eeb062e6893526dbf871b73aaf2ab1ac24003001f82a4444a31a4055d7cc2368

Analysis

max time kernel
176s
max time network
233s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 14:38

Target

Xy2tools_V1.020/update.exe
Size

712KB
MD5

78d2cc6623b49f34b8e91f49877773f4
SHA1

4773019ce2819b9f5e52c2ba0bb02968439c9bc5
SHA256

f0403a6c0dd4dd7b5b1d39c22be5a1e4385d87f0c79fc747ab9c9522cb4da3c9
SHA512

d8ca68f83f2f3312ff694f2d474dcc479f13278f8434c78ae27eebcd0cc393d00603a750c1aea6e108689a0e0c2e75ada106183503392860dc907d18483f7f21
SSDEEP

12288:d94jw9qBAQrVnifXPw7zc6Tm+Vd4aTpN/Mb+z+Gms8hTvAIWMAso99/ddGX6RCNF:qi8ivPuJxpNryGmjT4IWTjZ6hNF

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

update.exe

pid process

792 update.exe
792 update.exe

pid	process
792	update.exe
792	update.exe

C:\Users\Admin\AppData\Local\Temp\Xy2tools_V1.020\update.exe
"C:\Users\Admin\AppData\Local\Temp\Xy2tools_V1.020\update.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:792

memory/792-132-0x0000000000400000-0x00000000004C4000-memory.dmp

Filesize
784KB

Download
memory/792-133-0x0000000000400000-0x00000000004C4000-memory.dmp

Filesize
784KB

Download