39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
164s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3dchs.chm
Size

159KB
MD5

c5642a52a8a562c0e877a5305c5a5845
SHA1

b29b6bbc0a369174602a67358eeea937e42f1d49
SHA256

8c46faeb2037eb7935d24c880a712e65ab970da67a856d16ff0e7e9d7cab1e07
SHA512

b5bcda70ab3cb8a9349fad02fd995071680b5dcd7b7f77647c68e27657e051e23ac373f74b17dc104ec08fefeb7a52ce3749f42af7bb6834e646a3940d64a171
SSDEEP

3072:f2heZUqskDD7PdZ09rwJMTk0eb5vBFjRczuVllbKa:fBUJD9rwJMTk0eVf9zV

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

3116 hh.exe
3116 hh.exe

pid	process
3116	hh.exe
3116	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3dchs.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4172 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:8
1⤵
PID:1100