39882128f3a30ccf40f60c9eaa228f2cd7982f0944ae63ac481bc71e58413a5c

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 12:34

Target

Adobe Activator/Help/nvcpl/nv3d.chm
Size

120KB
MD5

b5f9ed44f46dc2a2b54baf908b9b9781
SHA1

055edb27199525f84dca0adad555b5809dc70000
SHA256

53136c96a99ec7f237470db34e49742ac99427ed6f2a22045ee9c45ce390bc69
SHA512

d2a6af6df0a945e3439cdbac94ed14e1c93c3fae4a1e3cad907835abae90d0142b04c9d10a0c4a0620178f0d9f31214a45dc864241831b2a64cef371a11a66e9
SSDEEP

3072:x3VpNumKOqLlFz0PNOsD2v8CGFM0Cbzq/bRsSohL3P1:x3Pnizg9D2UC6CUbCSaR

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

888 hh.exe
888 hh.exe

pid	process
888	hh.exe
888	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Adobe Activator\Help\nvcpl\nv3d.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:888