3c016adc1f9eb00be9e640014e53ebc9dcd01e934c8cafed54de6249ea82901d

Analysis

max time kernel
1800s
max time network
1492s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 16:06

Target
Help/nvcpl/nv3dfin.chm
Size 164KB
Sample241012-tkkcsayeme
SHA256 cabc965762d678f14e2187bbcb109f2cc796d9a84b9f168cf49dae270136ad99
MD5 0efe776961d3b5d75e2f2f2054a01ec0
SHA1 46b6178eec1c2503c7563c6f8b25806327ca4c12
SHA512 52a6d5a6b20838611f9c1a218e2ea28c44f3fb851fcdacc5ff0e920654bf8a224be6e2671eca6603a29b6117d07c58b05438a0dd9063a9b997e2585575659f93
SSDEEP 3072:0WHIytxYXU1f+dufJeE1sQrwwX5BTihAAD/JmtEqgxm8X8U11hvJT4JuAZREcLo1:0WHIyAqCEBsbwXqhjJ+Ebxm8MULhvIun
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5728	hh.exe
5728	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Help\nvcpl\nv3dfin.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:5728