3d20890d612c674a2c2f25d35332a79af77e754dbc71f1e2e35490ef8804200c

Analysis

max time kernel
125s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2024, 19:02

Target

e$EXEFILE.exe
Size

552KB
MD5

b55497b1bfc7b78ad6587b15955a632f
SHA1

f22a93d26b8d2f8fe03cf8100197c5c07f0b59a4
SHA256

a5432b77f82f13fbe4492ac82df7c2d5c191de87a6faaee86799fa94b39d9747
SHA512

2cf318c92424cb00eb65894b775fa85aa3a7734cfd22bcbf7455c7d69da831f7e3e322c4a0e61e4b60e60fc47817027edf44af5d9cad6d3357dd4a95aaf0c333
SSDEEP

6144:Dwrz5GbjBzFauZEk48Ks02VqEVT6pFbcxf8FiR8idWp27jlWPKy0rsMIVVBvg:DwPYrayE72nVTGFiRHM27jK7ocDvg

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4880	e$EXEFILE.exe
4880	e$EXEFILE.exe

C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe
"C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4400,i,11251706013556949551,5157034131170452377,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:8
1⤵
PID:3580

memory/4880-0-0x00007FFD3CAB5000-0x00007FFD3CAB6000-memory.dmp

Filesize
4KB

Download
memory/4880-1-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-2-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-3-0x000000001C280000-0x000000001C74E000-memory.dmp

Filesize
4.8MB

Download
memory/4880-4-0x000000001C7F0000-0x000000001C88C000-memory.dmp

Filesize
624KB

Download
memory/4880-5-0x000000001B850000-0x000000001B858000-memory.dmp

Filesize
32KB

Download
memory/4880-6-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-7-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-8-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-9-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-10-0x00007FFD3CAB5000-0x00007FFD3CAB6000-memory.dmp

Filesize
4KB

Download
memory/4880-11-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download
memory/4880-14-0x00007FFD3C800000-0x00007FFD3D1A1000-memory.dmp

Filesize
9.6MB

Download