7882eab29859c18474d3674f7802e17c2c78616f3dc9c5afbba04bd30db1b213

Analysis

max time kernel
121s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 19:03

Target

CAD迷你画图/DWGGallery.exe
Size

1.2MB
MD5

773dc516e20193225dec5903e9eb7d89
SHA1

6b42a649b96a57e325e1f255919319a997675083
SHA256

e8ca4b3f5128a55e33f9113e77fccb9d445daf8a6532f544cafdedacf471ce28
SHA512

6164c80de7ba133cad050492d5c885461c31ff28f6f4cf7fd5e4087e869ea793e3c1a02d3744d2aa230f302fab2069f0e6c8644cc5c26f9e4d8d37f59be843d5
SSDEEP

12288:frvHEu+Owl0bAj+DjxQoQ9xEpqaSaXaHaUsaHa0i5po9:T/3cj+ZQoQ9xEpqaSaXaHaUsaHa00pu

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5116	3040	WerFault.exe	86

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3040	DWGGallery.exe

C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\DWGGallery.exe
"C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\DWGGallery.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3040 -s 580
  2⤵
  - Program crash
  PID:5116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3040 -ip 3040
1⤵
PID:5032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4016,i,13544508926340531097,6671217806016090640,262144 --variations-seed-version --mojo-platform-channel-handle=1280 /prefetch:8
1⤵
PID:4268