3c93d8b1e69fab840a52746dc183e2bcac113cf1f05bd558a689c0bb5f24f4aa

Analysis

max time kernel
138s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-06-2024 14:51

Target

CADe_SIMU V4.2/CADe_SIMU_V4.0.exe
Size

44.7MB
MD5

8c47bb76c690cf4b08534ccc5b6df351
SHA1

512de7025584c803ba583fac956328b4f217fadb
SHA256

a5208930140862dd89bd01b1ee981fe0443235ccc9bf0119e7b2aee8f2fe8e91
SHA512

f9db18f9c4fd7d26a1f9c0b7f89ccba3e5711e7a343e536040ce2448867fd54a419b034846bbd1b437b82fce6ab3c86e7add7d89adb8d55834e175edbe8aca87
SSDEEP

786432:ue4+Bf1HkwCXU6W3PxoAeoWlW7qQZsL7n4s4B3H2MPs4+lI6pRT87MlUPEBkY9e+:ue4+BJkwv9nqSs4B3H2MPs4+lI6pRT8+

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5068	CADe_SIMU_V4.0.exe
5068	CADe_SIMU_V4.0.exe

C:\Users\Admin\AppData\Local\Temp\CADe_SIMU V4.2\CADe_SIMU_V4.0.exe
"C:\Users\Admin\AppData\Local\Temp\CADe_SIMU V4.2\CADe_SIMU_V4.0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4192 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:8
1⤵
PID:572