39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3dfra.chm
Size

171KB
MD5

b7af0f0de555f26450bebdd9f971c838
SHA1

96048e51d0a112c2d6049c8a0752430051bc5b93
SHA256

36da94c497de59e1154391f00dc08f058dbd2b4541c182f2c0abd84021d6f72c
SHA512

1c18045ed1075e22fef6cc3ca31e8736be7845111d31e42d3c2f713637e6759130c11316d95ff2086d519e791ca68e41e6ded131f5304141c642208d5814df98
SSDEEP

3072:gQ1T633ivRFRqnLA82jUqWGIww/RsvZ0UHnzfvKAL6At+dBQz/9:gQ1T6Sv9qcpjUq3fw/qNKAL6AtNz/9

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

4632 hh.exe
4632 hh.exe

pid	process
4632	hh.exe
4632	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3dfra.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4632