fb34d7a7305c98671292847f5ff0c4a635a01b71be7b60d420c6e0aa46a19b91

Analysis

max time kernel
133s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 04:14

Target

fb34d7a7305c98671292847f5ff0c4a635a01b71be7b60d420c6e0aa46a19b91.dll
Size

219KB
MD5

7b34b13ff06322b8108930fd76a5902a
SHA1

6946150adb1477df903fecaad0bfc6b9ee76f26f
SHA256

fb34d7a7305c98671292847f5ff0c4a635a01b71be7b60d420c6e0aa46a19b91
SHA512

e2598952951e37751b3ee7f2417205b17a9594a5e5b901fc3535fbd119d56c910924db5413ea2a4678fb00949c25382d45cde761cae8c02b64058146a514db5e
SSDEEP

3072:80GbzhgyN/+E8It//4yvTrCEtU7kLg3tn7+wqcfuv7BuBmv+pH:9GbzqyN/Qy/1beEuQs97pmv+

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4824	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\fb34d7a7305c98671292847f5ff0c4a635a01b71be7b60d420c6e0aa46a19b91.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:4824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4028,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=1268 /prefetch:8
1⤵
PID:3916