ff397278e0b7f54fdb5947587f23b2ed4886117698a9e3416393e69fe730f5f5

Analysis

max time kernel
141s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 12:18

Target

DumpViewer.exe
Size

2.3MB
MD5

6e260bb49fc8afeab02ada25d6ee5285
SHA1

7baca70f741486be568a1002068e6f879440e72c
SHA256

ff397278e0b7f54fdb5947587f23b2ed4886117698a9e3416393e69fe730f5f5
SHA512

787599d0cc7d04eadba41393d0409596993ab888da2165c6d0b24ca69f540037aebcf50225df492ca377d0d87eee1b337f2c1626ccdc02a54f5f2a44e4116393
SSDEEP

49152:FmcZwF3csTCdcl9XYPzI2PptlAqXAcAlYllwldu6pD:Eons9fqzRfOqQfYll4u

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

DumpViewer.exe

pid process

836 DumpViewer.exe

pid	process
836	DumpViewer.exe

C:\Users\Admin\AppData\Local\Temp\DumpViewer.exe
"C:\Users\Admin\AppData\Local\Temp\DumpViewer.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:836

memory/836-54-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-55-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/836-81-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-84-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-85-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-86-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-87-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-88-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-89-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-90-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download
memory/836-94-0x0000000000400000-0x0000000000DA7000-memory.dmp

Filesize
9.7MB

Download