3a938775bdcfa86d0dbd7afb4a732d1cfdd757cb7889c39dbf6c8dcd50ac2766

Analysis

max time kernel
172s
max time network
219s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 21:30

Target

3a938775bdcfa86d0dbd7afb4a732d1cfdd757cb7889c39dbf6c8dcd50ac2766.chm
Size

15KB
MD5

50d56a86e588bf2e48b5a7b63ba4b839
SHA1

8d961ebbe4e17e206fc77c1077d46b2c6fbb9bce
SHA256

3a938775bdcfa86d0dbd7afb4a732d1cfdd757cb7889c39dbf6c8dcd50ac2766
SHA512

6899406b5a1f0337c41bbbc327e9834e763efb6cfdfd81a99c642e2916c4d56e2e2503f5438b0513d4678a27880396063c6ca81d7ec47589d93e3260ace7523e
SSDEEP

192:jscR5ORnYFpsK/voeDvwUFt3WEcPsv2aEsvWI4FtaBg9/:jscR50nYHsKIQwUvW7O/WI4FtaBg9/

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3784	hh.exe
3784	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\3a938775bdcfa86d0dbd7afb4a732d1cfdd757cb7889c39dbf6c8dcd50ac2766.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3784