4f5c33b54a841bae7acb0e8216de5120a5b068ac60cfd158eca260d1f83cf067

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
18-05-2024 08:45

Target

1408_cn_V8.3.0.0/1408_cn_8.3.0.0/help.chm
Size

2.7MB
MD5

c6490a71f177f7d1e71073b07e1602aa
SHA1

d99557e3c974b39644735b7c09044faa9f97a9c2
SHA256

9723fea474e074994288f6c3cdc2ab2e04a037c2112b93296e8e2ad7e166bf2a
SHA512

186da897e91a48eef2737c2644cae7098ce55524acca48ba7fef5bf3b6e0fd6cbef70e53320209cbfcdbb4e22c04cc69ba99b38102cd149b1064fbe7d8dfbb1c
SSDEEP

49152:DuYZ3pGdh2El4DIMn4NLQcl+A1c7lodqqpHhm+J6IV2xn0jMjTlM94kLRgPJWNvV:DuY6v2hONLQc4+8o7O+JPu0jMH6pLTY2

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

2304 hh.exe
2304 hh.exe

pid	process
2304	hh.exe
2304	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\1408_cn_V8.3.0.0\1408_cn_8.3.0.0\help.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:2304