880ef9d36186660b4a11fcf2847f0e93cb0e2bc356ab24366fb1945a4add7058

Analysis

max time kernel
201s
max time network
212s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 21:30

Target

880ef9d36186660b4a11fcf2847f0e93cb0e2bc356ab24366fb1945a4add7058.chm
Size

16KB
MD5

9902d9fc445f97cd5f21c9cf5af08797
SHA1

1a4d42042810768964eafbba16ffb5ad6963561e
SHA256

880ef9d36186660b4a11fcf2847f0e93cb0e2bc356ab24366fb1945a4add7058
SHA512

7d8b481910d6d4c1b1fdc199275e6ae30c4ac49efbb246d22f856825507e21ea41f4505cad92232e6b2ac0d38fd9d882a7b76e4b605bae31e567856794c44a1f
SSDEEP

192:yWWPaVH0x1I5qkmYC9e+g/llhOPTzr69e1zBWbmQbOhHf8ORQa5k6uv5:yWWCV1r89eL/llhNe1zBkbgla5f

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5060	hh.exe
5060	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\880ef9d36186660b4a11fcf2847f0e93cb0e2bc356ab24366fb1945a4add7058.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:5060