39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
140s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3dfin.chm
Size

164KB
MD5

0efe776961d3b5d75e2f2f2054a01ec0
SHA1

46b6178eec1c2503c7563c6f8b25806327ca4c12
SHA256

cabc965762d678f14e2187bbcb109f2cc796d9a84b9f168cf49dae270136ad99
SHA512

52a6d5a6b20838611f9c1a218e2ea28c44f3fb851fcdacc5ff0e920654bf8a224be6e2671eca6603a29b6117d07c58b05438a0dd9063a9b997e2585575659f93
SSDEEP

3072:0WHIytxYXU1f+dufJeE1sQrwwX5BTihAAD/JmtEqgxm8X8U11hvJT4JuAZREcLo1:0WHIyAqCEBsbwXqhjJ+Ebxm8MULhvIun

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

4700 hh.exe
4700 hh.exe

pid	process
4700	hh.exe
4700	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3dfin.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4700