7882eab29859c18474d3674f7802e17c2c78616f3dc9c5afbba04bd30db1b213

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
04-07-2024 19:03

Target

CAD迷你画图/ProDfsShlExplus.exe
Size

2.0MB
MD5

88482877799f2d68ca0beaf36d679838
SHA1

d8cfcd5575363daf2352d5f54216cbe74dd92341
SHA256

9fc20a888236e1918a195f23b269c0b031f0c6ec8ce796e9aea28c0f43455fdd
SHA512

831f42a56231bf6f83078cba05c1f7f06e1316f49a63d5c7cda6323f05a69a139d03ab7b2d74cd3bc84e74a2cd3507c2812b42a1f45ff88cb4f6fd83d6fe2dfa
SSDEEP

49152:+vHQ10oc+LODj31iPgcWAJ+jDCb5tgqtKQKXn+sJ8NTQEoKt:+Q10oPODDEP9J+jDCb5t2QKXZ8NTQE3t

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ProDfsShlExplus.exe

pid	Process
1996	ProDfsShlExplus.exe

C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\ProDfsShlExplus.exe
"C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\ProDfsShlExplus.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1996