Analysis
-
max time kernel
1800s -
max time network
1486s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
12-10-2024 16:06
General
-
Target
Help/nvcpl/nvcplcsy.chm
-
Size
134KB
-
MD5
81a156ace7d74d3c92aa98631a662ae8
-
SHA1
6162f824bc784baf476fc6d21afb670ae135f92c
-
SHA256
66baab1fc24e69e441c679910e0e8028d6bb83906bf1dda75413c74a4e26e763
-
SHA512
46a89a9491dd8297b4a1efc44b3fa2139a454f76df822c0f7540676a9a40f60e23478d4862c6d33a1863bef050a371375a4dae9a3eef2af6214c6ca219a9be17
-
SSDEEP
3072:N+efAJZ9OfG2ufRvcpt41X7719Jo4Pgl8oSJgQoT+dmkr4IHLM+LX:N+eyZ9WGuAXzJPPglpSJgQoob4KVLX
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Windows\hh.exe"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nvcplcsy.chm1⤵
- Suspicious use of SetWindowsHookEx