6122dfa6ce8b8da8177dafb307d3719059610f8001ae3849f27e27e4814b6b21

Analysis

max time kernel
382s
max time network
394s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
03-07-2023 16:06

Target

Crack Setup/bin/HwidProtector.dll
Size

228KB
MD5

e4c67cc149ca5fa61382f8654409feee
SHA1

408931b18d31562fe9f3419d7663a1cafcc7f65f
SHA256

f2f264bd4faa5fccf3bd32a9a7b6b5ffc90754c759dca3127be0ff107bef33a6
SHA512

49de4dc0de0f25dd279a33124fc4fdc2b80cec6105c70290db48f77068775f1727c5f4d996bf41f5ded424de0318a5eef9e0ad08050a0fd3a8964c94afa89f8b
SSDEEP

1536:6kig1Ac42h743XNd55vQryAdbEPVBbM44DdROpiMnesVWDwVPhVbOucFCDrMq1np:jT1lh743rvQ4R46hJ/Uyxu9yLBRiy

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
904	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Crack Setup\bin\HwidProtector.dll",#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:904

memory/904-54-0x0000000000290000-0x00000000002D6000-memory.dmp

Filesize
280KB

Download