17a886a22e1f8d6b4fb69f8961aeff4d565937f5271f635676b1b1ad550a14a8

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 12:27

Target

17a886a22e1f8d6b4fb69f8961aeff4d565937f5271f635676b1b1ad550a14a8.chm
Size

671KB
MD5

8fa49f55a1df9da4d9860c08694a966a
SHA1

172dc5a4982619f759df57d40be3f4db12d6feed
SHA256

17a886a22e1f8d6b4fb69f8961aeff4d565937f5271f635676b1b1ad550a14a8
SHA512

61b72c8c56aeee3c2e1c29f964eb35b07a0721de5e34f73bcaf6ba1ac154a7d3d19f564ef6be558d6eab03a5bdbe14f996950f29636f503fae036388acd052a9
SSDEEP

12288:4Yd4rus0vUSFIb8rQoXY+t6rv8iMROXNcvpXF8MHLTvsgnGPjgTdDOq8VVNza:4YdquU8Q3+t6rvAOehusTvtGLgDAVzW

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4904	hh.exe
4904	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\17a886a22e1f8d6b4fb69f8961aeff4d565937f5271f635676b1b1ad550a14a8.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4904