86d30b05342c65e4576114efa36272aea49e5696fd70c57b871a81f09d8d2e75

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01-05-2024 07:17

Target

GreenBrowserGB_6.9.1223/Plugin/SnapShot/SnapShot.exe
Size

247KB
MD5

cb1a571868f81e6bfd0d89e98c675080
SHA1

7f6ef8368d2a71df930df1c2e2ef4c76f0600d6f
SHA256

6d661015af6d7df0b48f665ca8441a88a15da345e025cbac9641427b922ec980
SHA512

6aaf1f8a269d12a26611ea19b3e5d7f8929500c3881ee50b41ea7735b0e3a4ad6b734dc0d5fee810529e585b255a0a551d5ed3665a0e6b2679aa73f00c6f2072
SSDEEP

6144:X/pMXZRjPjBK3IuDE4zmVhtqYMVOMUmGhp0oKNIi0:BMpRjPdK3IuDMtqhXOdiIi0

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1884	SnapShot.exe

C:\Users\Admin\AppData\Local\Temp\GreenBrowserGB_6.9.1223\Plugin\SnapShot\SnapShot.exe
"C:\Users\Admin\AppData\Local\Temp\GreenBrowserGB_6.9.1223\Plugin\SnapShot\SnapShot.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1884

memory/1884-0-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download
memory/1884-1-0x0000000000020000-0x0000000000023000-memory.dmp

Filesize
12KB

Download
memory/1884-2-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download
memory/1884-4-0x0000000000020000-0x0000000000023000-memory.dmp

Filesize
12KB

Download