a39a14ac178f3d1b6e402c60fb502b9ff8b2b023e709acc9cba7661705508460

Analysis

max time kernel
137s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18-04-2024 06:21

Target

pstpassword-v1.02/PstPassword.chm
Size

13KB
MD5

100b6ac0006627b989b5a9b18381f4e7
SHA1

ba00d54d7d170c94ccef9f6a76197293106eb4ca
SHA256

8b326d722ff12607b6e86641409b503c0a075cc1a11c7b7e46011c9c33e0be99
SHA512

f00b07b1c1f4b19c594bcde12975b640bcfed0f973ce0a10146e2e4b08ec606ae968e18a44db46a41baa98d5bd008ff31ee62506c922c0e9c00c163ad4febdd1
SSDEEP

96:JZ38TKaojgiDQouOXAlguZQR/c/3lappVbMRiYY6RU4m065gAymvsu76a:JJ81viDQoXlIuUvYjZMRZvK4mVgA/0Q

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2252	hh.exe
2252	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\pstpassword-v1.02\PstPassword.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2252

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5164 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:8
1⤵
PID:1884