3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d

Analysis

max time kernel
1800s
max time network
1165s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 16:06

Target
Help/nvcpl/nv3desn.chm
Size 169KB
Sample241012-tkkcsayeme
SHA256 78ea2fedd3ef6b2847b59a8d98b371cf82ad728bac19c740a654d1e5b733cc43
MD5 73bfe0abbe2128c47ead3c96521a9d70
SHA1 9780c4442a36f716be7b2da42068a7aa8f2d9356
SHA512 990b0c741a7166863fa966df7bcbc932d1e2925700e6e13f9fbf2c15cbd4d862f252c599d74074227cf6563a4e0e84a0a1475d88c8cca522aac423e420cbaaf5
SSDEEP 3072:7SBSORLxRgLh1GJr4pGODBnDkHNe7PEAGUSM8XT42wIhev7RDyZAROqtqCb:WEORLxmfKiZDFD9PsPrc2wIA9QLqtqk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
632	hh.exe
632	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3desn.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:632