b1490584f0a01026786c1dd5fea77dfee5fecdf59fd5050f8f10e687334dd36d

Resubmissions

17/05/2024, 17:36

17/05/2024, 17:35

max time kernel
158s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 17:36

Target

Updates/nvcpl/nvmobptb.chm
Size

49KB
MD5

7076f32361f354d35a4c32728f8da180
SHA1

d2a905fcfe512f932b1e9657a3789f2c85873106
SHA256

58f50efd5b4e005cca5c7a522b027383a34801b406b0210fd0d887d86835ca6e
SHA512

a9531f6870c1ea87f7d9f75d9c632f57db2061e69fcb97a18f3d9b08ca727f4c09a24c0ce35cd1266582e7c55d141b8e8cba24000d0f95288e34ac0eb8f97eeb
SSDEEP

768:DQRdJVNBY7be/MEXERImzmqMJ4dKbAUEYic6B6kU9kz3m0FthE9G3BR/nspH02Rt:DQRTVjY3eMEyZzmwd0oc284m0SqB5s7t

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4400	hh.exe
4400	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvmobptb.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:8
1⤵
PID:4204