18f783e4f156e62ca88ca7b196e7f1b28fd59aedc2fa3396a7a9c9bdad572181

Analysis

max time kernel
113s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/12/2022, 01:03

Target

18f783e4f156e62ca88ca7b196e7f1b28fd59aedc2fa3396a7a9c9bdad572181.chm
Size

210KB
MD5

a6d4905c7d2f53b370aebb0c21e41ed3
SHA1

de6fa80bc7bf6b275f497d8b5a19455e2961a1f5
SHA256

18f783e4f156e62ca88ca7b196e7f1b28fd59aedc2fa3396a7a9c9bdad572181
SHA512

23afba4c5034b45ad901a98ab13000d0a957279b2cd207b23ab8c833f7538d2ce34ccd2bebef75d105635fc9fbd65ff67828626733f19a826208857732fc36f8
SSDEEP

6144:Lmd48No3pmy3XGv8QNu1eqiMuyOygbxwB7UE2Oi:g48ia//qRtg6B7Hji

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1064	hh.exe
1064	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\18f783e4f156e62ca88ca7b196e7f1b28fd59aedc2fa3396a7a9c9bdad572181.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1064