39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
144s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3dcht.chm
Size

163KB
MD5

cac8a4ed9640b74857a93fb8b77f62e3
SHA1

c214272f9f89b99b44ebc3dafc8c84e3a945495b
SHA256

1b3ae5a0bd843c09ee6662cd7a5f3d5b6f364ebce14afa85b268375df3c9c235
SHA512

eea1cb16aa432e73927fb316f357a021cc10ff3e9e347110e1b6e14995ff07c19425f3d9b73a9b1fd43fe8731488ad4ae767ce2e7e062b5a0d2421d5acc972d4
SSDEEP

3072:Ac/UIB28I0yE5WiOsOtrw8HfgQH8XHsJu0fR3xzTWu8KbjMb+FALzF:ARIB0zE56sONvHfNcXUvZ31qIFALR

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

1120 hh.exe
1120 hh.exe

pid	process
1120	hh.exe
1120	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3dcht.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1120