18b6bf293b3589aea4f4cbfe700b8372bc6f0f383ed69f404037e93dc0af84ab

Analysis

max time kernel
448s
max time network
449s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 15:41

Target

winrar-x64-700pl (1).exe
Size

3.9MB
MD5

ba812b4837d0a245795103bbb9d3e00e
SHA1

cfcfff6f2492c160c1037b6d1a3b7071d94776cc
SHA256

18b6bf293b3589aea4f4cbfe700b8372bc6f0f383ed69f404037e93dc0af84ab
SHA512

9593fa3d43cbf57216f1c2ac0cfd0527d25e9fb488cb9e42d8db0ddd5f0b125403ee028dc44dfa6ec402199fa766ff255e235827a59bac2110f55577e8e6fae3
SSDEEP

98304:fWapxBfKiTEAPzh7ix1cN8sD0k8i+55jRLKKVWXdnuoIJTGTVMHQh:uagiTEAP1K1W800kH+vRLBidtIJKRMwh

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

winrar-x64-700pl (1).exe

pid process

1216 winrar-x64-700pl (1).exe
1216 winrar-x64-700pl (1).exe

pid	process
1216	winrar-x64-700pl (1).exe
1216	winrar-x64-700pl (1).exe

C:\Users\Admin\AppData\Local\Temp\winrar-x64-700pl (1).exe
"C:\Users\Admin\AppData\Local\Temp\winrar-x64-700pl (1).exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1216