Overview
overview
7Static
static
3ARP.exe
windows10-2004-x64
1AggregatorHost.exe
windows10-2004-x64
1AppHostReg...er.exe
windows10-2004-x64
1AppInstall...te.exe
windows10-2004-x64
1Applicatio...st.exe
windows10-2004-x64
1ApplyTrustOffline.exe
windows10-2004-x64
1ApproveChi...st.exe
windows10-2004-x64
1AtBroker.exe
windows10-2004-x64
3AuthHost.exe
windows10-2004-x64
1AxInstUI.exe
windows10-2004-x64
1Background...st.exe
windows10-2004-x64
1BdeUISrv.exe
windows10-2004-x64
1BioIso.exe
windows10-2004-x64
1BitLockerD...on.exe
windows10-2004-x64
1BitLockerW...ev.exe
windows10-2004-x64
1ByteCodeGenerator.exe
windows10-2004-x64
1CIDiag.exe
windows10-2004-x64
1CameraSett...st.exe
windows10-2004-x64
1CastSrv.exe
windows10-2004-x64
1CertEnrollCtrl.exe
windows10-2004-x64
1CheckNetIsolation.exe
windows10-2004-x64
1CiTool.exe
windows10-2004-x64
1ClipRenew.exe
windows10-2004-x64
1ClipUp.exe
windows10-2004-x64
1CloudExper...er.exe
windows10-2004-x64
1CloudNotif...ns.exe
windows10-2004-x64
1CompMgmtLauncher.exe
windows10-2004-x64
7CompPkgSrv.exe
windows10-2004-x64
1CompatTelRunner.exe
windows10-2004-x64
1ComputerDefaults.exe
windows10-2004-x64
7Credential...er.exe
windows10-2004-x64
1Credential...er.exe
windows10-2004-x64
1Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2024, 19:29
Static task
static1
Behavioral task
behavioral1
Sample
ARP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
AggregatorHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
AppHostRegistrationVerifier.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
AppInstallerBackgroundUpdate.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
ApplicationFrameHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
ApplyTrustOffline.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
ApproveChildRequest.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
AtBroker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
AuthHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
AxInstUI.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
BackgroundTransferHost.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral12
Sample
BdeUISrv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
BioIso.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
BitLockerDeviceEncryption.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
BitLockerWizardElev.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
ByteCodeGenerator.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
CIDiag.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
CameraSettingsUIHost.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
CastSrv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
CertEnrollCtrl.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
CheckNetIsolation.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
CiTool.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ClipRenew.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
ClipUp.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
CloudExperienceHostBroker.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
CloudNotifications.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
CompMgmtLauncher.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
CompPkgSrv.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
CompatTelRunner.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
ComputerDefaults.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral31
Sample
CredentialEnrollmentManager.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
CredentialUIBroker.exe
Resource
win10v2004-20240802-en
General
-
Target
CloudNotifications.exe
-
Size
106KB
-
MD5
5b7cbe876830810f87653965a5707c06
-
SHA1
240572965dd1049eb091a9f83ddf47c879c5594f
-
SHA256
c0341fbecd0c57f8d5335b13fee85c878494bce5a11032b18f521ac2070d7534
-
SHA512
84d34fcf9f13afd3ccde1bec6d8c274ccf317b7712fd07737f57d16c887c77223323b8e6a4e0092321734a18502858d078665a0c52fc0b4771e30c99d970ce17
-
SSDEEP
3072:w3LXHNBclBqBkkbsEA+Ei2j0iZuoHAjoE6pd:wbXHTcHqBkkbspgiZRHNX
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3064 CloudNotifications.exe