eae34425f92a32173107f5723058aa348545fbad61109e63b178eebf048dde8f

Analysis

max time kernel
131s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2024, 11:26

Target

$TEMP/$EXEFILE.exe
Size

6KB
MD5

30bfedc658f64ad26beeaf7f86f59195
SHA1

c117d11c71b174dcbc4befa04d0189ef653a4fbb
SHA256

4cc27e18b1a79e729ef3c3032257f3b1e4b5cb55ea34b9e548380b01493cc2c3
SHA512

79f3ea5c465220d58e139d9829bd3f00faf4a39113e02b8e549f42496fb62263de4751063a085bf3d2962b15c72728309261f1faf3579e36e99198d7ecf536b6
SSDEEP

96:H/xEAOhcoR5m76X/Rlo/u5LaXiVXLBOCPwveaxhdy+v8:fxUaOm76X/RS2syCCGHd1v8

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5052	$EXEFILE.exe
5052	$EXEFILE.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\$EXEFILE.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\$EXEFILE.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2540,i,7447299413640964517,4240724842020506306,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
1⤵
PID:2868

memory/5052-0-0x00007FFBF42D5000-0x00007FFBF42D6000-memory.dmp

Filesize
4KB

Download
memory/5052-1-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download
memory/5052-2-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download
memory/5052-3-0x0000000001430000-0x0000000001472000-memory.dmp

Filesize
264KB

Download
memory/5052-4-0x000000001BE70000-0x000000001C33E000-memory.dmp

Filesize
4.8MB

Download
memory/5052-5-0x000000001C3E0000-0x000000001C47C000-memory.dmp

Filesize
624KB

Download
memory/5052-6-0x00000000013E0000-0x00000000013E8000-memory.dmp

Filesize
32KB

Download
memory/5052-7-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download
memory/5052-8-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download
memory/5052-9-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download
memory/5052-10-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download
memory/5052-13-0x00007FFBF4020000-0x00007FFBF49C1000-memory.dmp

Filesize
9.6MB

Download