5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe

Analysis

max time kernel
152s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 03:19

Target

171626148566c2843b86c761e8e38d1d5f6fd0f6d09cbb51092ff14a3db212994aab8b9878418.dat-decoded.exe
Size

483KB
MD5

228ec528d9ab9357c0ffd2e43bd827cf
SHA1

39432be9c2b6cf0844413a71258f0840b89fe6df
SHA256

5d8d5bd02a6f2fb6e677d8018086ad1421277eb0172a9db32d04ec8098072dbe
SHA512

8fadef0834df3dfb627e2cb0dcd5de214a90dd1ee38755e9ad988a81d04909d5e29d0646574ea1236e5797cc5053136554d0812aa968c8f32dcc34a1b6a78ac9
SSDEEP

6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNsS5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDwcv

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

171626148566c2843b86c761e8e38d1d5f6fd0f6d09cbb51092ff14a3db212994aab8b9878418.dat-decoded.exe

pid process

2432 171626148566c2843b86c761e8e38d1d5f6fd0f6d09cbb51092ff14a3db212994aab8b9878418.dat-decoded.exe

pid	process
2432	171626148566c2843b86c761e8e38d1d5f6fd0f6d09cbb51092ff14a3db212994aab8b9878418.dat-decoded.exe

C:\Users\Admin\AppData\Local\Temp\171626148566c2843b86c761e8e38d1d5f6fd0f6d09cbb51092ff14a3db212994aab8b9878418.dat-decoded.exe
"C:\Users\Admin\AppData\Local\Temp\171626148566c2843b86c761e8e38d1d5f6fd0f6d09cbb51092ff14a3db212994aab8b9878418.dat-decoded.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3936 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:8
1⤵
PID:4532