=
flash

j82lgS5kgk.exe

Status: finished
Submission Time: 15.01.2022 02:46:14
Malicious

Comments

Tags

  • 32
  • exe
  • trojan

Details

  • Analysis ID:
    553495
  • API (Web) ID:
    921017
  • Analysis Started:
    15.01.2022 02:46:15
  • Analysis Finished:
    15.01.2022 02:52:05
  • MD5:
    ae6cdc2be9207880528e784fc54501ed
  • SHA1:
    b4aff64bb1f0fee5d5c47c5f1275351c758b423a
  • SHA256:
    e71a997a58a54db0a879969fa1c3de5193b090bc59f3468f408785dbc0d9c7ac
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
48/100

malicious
9/67

malicious
7/43

IPs

IP Country Detection
217.21.76.148
United Kingdom

Domains

Name IP Detection
sincheats.com
217.21.76.148

URLs

Name Detection
https://sincheats.com/gas/PS4SAVEWIZARD.dll
https://sincheats.com/gas/PS4SAVEWIZARD.exeKH
https://sincheats.com/gas/PS4SAVEWIZARD.exe
Click to see the 8 hidden entries
http://upx.sf.net
https://sincheats.com/gas/PS4SAVEWIZARD.dllWhttps://sincheats.com/gas/PS4SAVEWIZARD.exe
https://sincheats.com/gas/PS4SAVEWIZARD.dll3
https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest
https://sincheats.com/gas/PS4SAVEWIZARD.dll-oC:
https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest-oC:
https://sincheats.com/gas/PS4SAVEWIZARD.dllurlrc
https://sincheats.com/gas/PS4SAVEWIZARD.exe-oC:

Dropped files

Name File Type Hashes Detection
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_j82lgs5kgk.exe_d42a328ddfe8a7f19158220e406261856f9152_00000000_147602d8\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
#
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF404.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
#
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF5BA.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
#
Click to see the 2 hidden entries
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
#
\Device\ConDrv
ASCII text, with CR, LF line terminators
#