62ca15e1aeee9330d60afa214ff43484335944d44e698797de4fcaef41c8aeb3

Analysis

max time kernel
1800s
max time network
1514s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
06-05-2024 00:52

Target

Updates/nvcpl/nv3dtha.chm
Size

191KB
MD5

74d454f97fc5211bcbb15106ad7d1dbd
SHA1

089642b332f75d1b1a53dfe61a398d2f2bdc7483
SHA256

2b1d0e3de6706dbe310cb30a642b9d669758f87338a1c096ffe9ff6f41bcc17a
SHA512

3764361c9be53d3326e149f3f4feca5a1d53ed8d5f065dea8282dfab2cfef0188be994f84391fec3d5e95ed2272bd474f5f2b8e586090afa3eeb1a956ca49b28
SSDEEP

3072:XmjzhoquR1iJ5E54XwXGaTtNnF/NPu/JM+RVLycnYIchp7X/d9SjwzsFu4dQgq:XmjVoqzm1Pu/W2VL9n+/R9E3Qgq

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2392	hh.exe
2392	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nv3dtha.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2392