39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3deng.chm
Size

157KB
MD5

3ecd51de3a504eec21d70ccf865d43dd
SHA1

e36dc69365c8316509bde90bcd85379e088689cb
SHA256

1d80c40950a02fe124d5450f0f2a4b177a497607575b4b13eb06debf958b6cea
SHA512

7d7753c86f808440641f1d8aef255f787d23eb0af0aea886f0f8d85d994dc8a839f5df2f182e934c3508acbfa06de4a0d430df9076f141084fb1fab53f5d6490
SSDEEP

3072:TrTTUcvjPGlZ2LByOsOKYRprh/tIM10HcYLM127AbK2G51wAe:Tr8rZ3lMpRtjYLM1BLm+Ae

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

2792 hh.exe
2792 hh.exe

pid	process
2792	hh.exe
2792	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3deng.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2792