57def8e75b76c6ea0c1237935885f9a8ef9cc74da91c2b4e1ba0a52f8d52e236

Analysis

max time kernel
129s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 16:08

Target

ExcaliburHelp.chm
Size

37KB
MD5

c3e3de7b52e8cd8dfb01055bf7bfa7a5
SHA1

99e68770d436b7fec0a44b4f3d75438c6bc1fcb0
SHA256

8eb218818dd1b2b14d2005e8c4247ca090615c88cea6badc08f9d64f35662a4b
SHA512

7f2f5d51eadbf84ace90a43e2804547fff73953198cabcb0287d4718fdbc0c27594c54c86768fcc9a60dc9e059c122e5d944b185c7cb88671e616f17023c9531
SSDEEP

768:cLbWp77dPN4C405dSdZRtV+xSmQL6q3FtDYno1Q4O7YOADrcZoVSJki:cLbWp7xPN4CvSdZRSxouv8OsOAfcZPki

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

3476 hh.exe
3476 hh.exe

pid	process
3476	hh.exe
3476	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\ExcaliburHelp.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3476