2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-de
resource tags

arch:x64arch:x86image:win10v2004-20240412-delocale:de-deos:windows10-2004-x64systemwindows
submitted
15-04-2024 06:33

Target

tftpd32.chm
Size

356KB
MD5

de0095e371874836fb50cd3400d7b204
SHA1

8a1000443a71417c6233f277b87ca6585bebca2a
SHA256

810a0f52703d051b30d5ecd219c72b0599964de34d1c1912367271c87d4725bf
SHA512

0bd27dcf930df12d4fc2f29caae8809be74d124946561d60a6fa0e8d775ab3baf34dbde2560bb483a348d769d39c79b9af9666daa6eb87770053736d1df474db
SSDEEP

6144:jU06ChpcJshdgk7fEPOgZLrBOhw8B84J3pCARzcy7sbqtr2YhS60gTurOQrVm:z6EcJAe3POgBTO84Hpcy+qtr22SoT4xo

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

1752 hh.exe
1752 hh.exe

pid	process
1752	hh.exe
1752	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\tftpd32.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1752