cf084eddfd5c31f9a46b4609b8d6e40f27bbe4cdd88de7c1835e5674eb0a29e0

Analysis

max time kernel
186s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 14:44

Target

cf084eddfd5c31f9a46b4609b8d6e40f27bbe4cdd88de7c1835e5674eb0a29e0.chm
Size

111KB
MD5

7a0b499fbf487451f538f1bfc43a3718
SHA1

75307e37f7e0759f2a68924cf40bc804318b804a
SHA256

cf084eddfd5c31f9a46b4609b8d6e40f27bbe4cdd88de7c1835e5674eb0a29e0
SHA512

de84ba1d3dd152766f66f4b58493a8996f22838d4c28da00b8740cd106cfe8ebd220606279a40b5968c841476e4ed7b9da9a5dd2bfd49ed0bbe244dd66691f36
SSDEEP

1536:QaFEWxqnpA6XXJuWhnLOcxX9oEMwsIdK0OIUtwfUO/A554XuFNi6DT4AAVpjR55c:vEYqOAwWhNNemXUtwNE2KNTEbp5tkQHy

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1700	hh.exe
1700	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\cf084eddfd5c31f9a46b4609b8d6e40f27bbe4cdd88de7c1835e5674eb0a29e0.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1700