62b8145806edfef30c6b40e4feb27435795b021a14604a37f69ecae2641a7f45

Analysis

max time kernel
114s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
09-09-2024 00:14

Target

e$EXEFILE.exe
Size

601KB
MD5

00961172ece76f41adae8759d728b2a6
SHA1

0b86d0f2d367e61eb0a37648dfdf46d4b080c8a8
SHA256

3b83f41249c7b3e6249e348ccbfbfc9be0f973c1bd65cf021e93dda712a3769d
SHA512

67d06465886520898233a60becb853db6ac6de700073ccb2c1b16f868caf6ed6426ac14f53a43ec29526daf6dbd75c32e0fa87d6b21d26f72fc105c49c734c94
SSDEEP

6144:qDix0OuDbQhEwaqfKBF2OyjHp/g39krWtR2g/1zPzbIdCSpckXB8buCwM:qDix0OQwLEOjJY3s617Idb/t

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4692	e$EXEFILE.exe
4692	e$EXEFILE.exe

C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe
"C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4252,i,2727319350781907497,7925939240893079607,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:8
1⤵
PID:1672

memory/4692-0-0x00007FFDA49A5000-0x00007FFDA49A6000-memory.dmp

Filesize
4KB

Download
memory/4692-1-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download
memory/4692-2-0x000000001BD50000-0x000000001BD5A000-memory.dmp

Filesize
40KB

Download
memory/4692-3-0x000000001C770000-0x000000001CC3E000-memory.dmp

Filesize
4.8MB

Download
memory/4692-4-0x000000001CCE0000-0x000000001CD7C000-memory.dmp

Filesize
624KB

Download
memory/4692-5-0x000000001BDA0000-0x000000001BDA8000-memory.dmp

Filesize
32KB

Download
memory/4692-6-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download
memory/4692-7-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download
memory/4692-8-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download
memory/4692-9-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download
memory/4692-11-0x00007FFDA49A5000-0x00007FFDA49A6000-memory.dmp

Filesize
4KB

Download
memory/4692-13-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download
memory/4692-14-0x00007FFDA46F0000-0x00007FFDA5091000-memory.dmp

Filesize
9.6MB

Download