b1490584f0a01026786c1dd5fea77dfee5fecdf59fd5050f8f10e687334dd36d

Resubmissions

17/05/2024, 17:36

17/05/2024, 17:35

max time kernel
140s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 17:36

Target

Updates/nvcpl/nvmobara.chm
Size

49KB
MD5

cb19b2b9b88da1fc009316bbe4d4fc95
SHA1

8b55202bc5a438636343269570fb704f64c2b9b4
SHA256

983adb3fea3988b622b58bf2d79f00a86b56aca29546652ddcc2c765047fa2aa
SHA512

bee7f794a8ce853b580f1fe743daee0d46a627139f33e874c092fdbb03519cb46aab8dea8419ab9bda6f770f2290f71c2b0974bee46234461ddb610de03cddfa
SSDEEP

768:eYMA1aGgrE5bwwO5n+56eyC1+R7XgSjkCaM0yIoL/cISdheX8tPVQOfiA6ma6C:eY/1NDnvVYR7Xf/a/yIoL/R2ec2OfTNO

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4916	hh.exe
4916	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvmobara.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4168,i,4686244434963378549,11462511444150484980,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:8
1⤵
PID:3940