3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d

Analysis

max time kernel
1800s
max time network
1500s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 16:06

Target
Help/nvcpl/nvcpldan.chm
Size 130KB
Sample241012-tkkcsayeme
SHA256 a042945436ae9e9d3191864eb0893aac44b107e2ad23b4061351fbdbc289a216
MD5 5449d599095d008ec1c19e04e60777e9
SHA1 bb69f851bcdb0ef8706e68a3dbd86573af1874fe
SHA512 9247aec18a2777bce38aa87bdf0106d5a6f886f5c12ab5484330aa725ccf59e405bd8a489774b051ae9b9ecb645c04a7d109333288daaf81f30a07cf2ee7a1bd
SSDEEP 3072:upAHVBuTtXgpuAl0Syg2FJsJFuT+L5gEBCN9+kQBq:upACOu20Syg2Fr85gEQfJ5
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4624	hh.exe
4624	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nvcpldan.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4624