b1490584f0a01026786c1dd5fea77dfee5fecdf59fd5050f8f10e687334dd36d

Resubmissions

17/05/2024, 17:36

17/05/2024, 17:35

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2024, 17:36

Target

Updates/nvcpl/nvmobdan.chm
Size

48KB
MD5

b2397b67e77957cdf669e5a1cec40084
SHA1

65f9a2436a7d7b4ebf932987a3b52bf8e3bddcff
SHA256

8d70f78be50cc7c422dd8d3e6bdb9ed2afa5eb350639a90243179e0a8f1b94db
SHA512

98d02ca9ee22164ce123987ab0cbcd06d0506318a06f0e7d62155374587a40d83ef187ee11967575658bee9f67982acca1570b57bb6bb9206ff099fa821dac83
SSDEEP

768:8vpHXpWHMkWt0aD8uvwPXZS+wD86PFMA17uYb9l+Vo1YyUZOwu+nnjBpf4muQNC5:8vpHXkskyNVvkXZS+wDDN17tbTbAFKKW

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2592	hh.exe
2592	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvmobdan.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2592