532a7d66259842f4a710ea7bc6dc48547de371bb69fc842f53934876e787efb8

Analysis

max time kernel
72s
max time network
77s
platform
windows10-1703_x64
resource
win10-20230703-en
resource tags

arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
submitted
07-08-2023 15:45

Target

Setup_FileViewPro.exe
Size

1.3MB
MD5

5cb079f8ec885592c5538dbe0362d593
SHA1

a5702ea5dfd73c619ad2625e645b93e0a39b1451
SHA256

532a7d66259842f4a710ea7bc6dc48547de371bb69fc842f53934876e787efb8
SHA512

8787a51f3e7eacfd5f507abdfacd58aef34a704d01f84c05ec8074cb77318d3b14223ff2ca3da399633ef82d3529266bcf3bb174bf746450697117915641fb90
SSDEEP

24576:Ch6SVFzDl6eZmL4v9IoYOlrQ14T1+G05hKwzlXX8l8whkwBY2/+WLHkOU:q6UXtvDz85hK8XM8rcY/OU

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

Setup_FileViewPro.exe

pid process

2088 Setup_FileViewPro.exe
2088 Setup_FileViewPro.exe
2088 Setup_FileViewPro.exe

C:\Users\Admin\AppData\Local\Temp\Setup_FileViewPro.exe
"C:\Users\Admin\AppData\Local\Temp\Setup_FileViewPro.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2088

C:\Windows\SysWOW64\werfault.exe
werfault.exe /h /shared Global\fc957423e6fd48f1b79010dd886ff857 /t 2516 /p 2088
1⤵
PID:2540