068043f36796248f18f3697723098eedc834050ab8676e6d27facefa203b228f

Analysis

max time kernel
143s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29-02-2024 08:02

Target

ae14f19f1203f6ba066744227b3d945a.exe
Size

377KB
MD5

ae14f19f1203f6ba066744227b3d945a
SHA1

737271a6619b31b8acc6f9de59858125303af48f
SHA256

068043f36796248f18f3697723098eedc834050ab8676e6d27facefa203b228f
SHA512

92cb85dcc45bf1587e64610c1285ad4c433de008de26f76c2cbedee85d09833672247189d021f513edd92affaa4ae7ac6500d63e4b7a6619b15aa4e46614be7d
SSDEEP

6144:DjfygdP/mpm2EShl10MjZw+hjcVAj/CfrkABLGaUhE5alHlQwi3Xh6hU1y/Tsiz:PyM3qm2zOMZrMApABLG1hEWlvCh1jA

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ae14f19f1203f6ba066744227b3d945a.exe

pid process

4700 ae14f19f1203f6ba066744227b3d945a.exe

pid	process
4700	ae14f19f1203f6ba066744227b3d945a.exe

C:\Users\Admin\AppData\Local\Temp\ae14f19f1203f6ba066744227b3d945a.exe
"C:\Users\Admin\AppData\Local\Temp\ae14f19f1203f6ba066744227b3d945a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4140 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
1⤵
PID:1544