39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
141s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3ddan.chm
Size

150KB
MD5

3f5ea602a3c7df10f04607bb4036ae91
SHA1

41968743e4d80e8a1d71888dca040a26ab452ea0
SHA256

d2ecb5acf630f64891c85d796cdfc251b83604921a6057c8c747e4d0383c0cbf
SHA512

f8c57b8e8d07b5f88928cd57d07261af89f3e6ec2debf6a3d575fb113809ef31343058e750a81160b9a44ea63852f7ee1cd8d1bfac16919b059b3403086de15c
SSDEEP

3072:kpVTpx2TlTw8sFQMCv57XtzTAmOHt8/YCFPWZlfoUwUGx1fCHMM:kpV+xU8sNg7XhTYm/2VohUc6t

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

1604 hh.exe
1604 hh.exe

pid	process
1604	hh.exe
1604	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3ddan.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1604