3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d

Analysis

max time kernel
1800s
max time network
1498s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 16:06

Target
Help/nvcpl/nv3d.chm
Size 120KB
Sample241012-tkkcsayeme
SHA256 53136c96a99ec7f237470db34e49742ac99427ed6f2a22045ee9c45ce390bc69
MD5 b5f9ed44f46dc2a2b54baf908b9b9781
SHA1 055edb27199525f84dca0adad555b5809dc70000
SHA512 d2a6af6df0a945e3439cdbac94ed14e1c93c3fae4a1e3cad907835abae90d0142b04c9d10a0c4a0620178f0d9f31214a45dc864241831b2a64cef371a11a66e9
SSDEEP 3072:x3VpNumKOqLlFz0PNOsD2v8CGFM0Cbzq/bRsSohL3P1:x3Pnizg9D2UC6CUbCSaR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2568	hh.exe
2568	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3d.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2568