Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1800s
  • max time network
    1499s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    06/05/2024, 00:52

General

  • Target

    Updates/nvcpl/nvcplheb.chm

  • Size

    136KB

  • MD5

    420b541ffbdf9524bcf3a3623984f253

  • SHA1

    130f6ed76ee9d41cb8bb6b132b2bd66ab8a52535

  • SHA256

    cf196a230867ddb1068eed4f5b07fd7c458fc4fe99d119f018fa6046b5baa3f0

  • SHA512

    2e906aa2b4ef2efac47a945b9773b1b8d26bec6b4d79bd7f743f5317e1d618f6eabad288f4aa99de4a68667aaa3dd9896f2526c51cf9d2b1cfcc44b7375e0013

  • SSDEEP

    3072:DLWb230JcDg6R7HOj0aBTwFFKU8HO7eGpKuBtH0tLNxSmuCmbeidn7e9e:DLWFJKIj0aB8FKUiO7eGphH0onbemUe

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Windows\hh.exe
    "C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Updates\nvcpl\nvcplheb.chm
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads