6cd038a0437be520f4cae3b1b756a10f90d632e3bbd8ad3a8bbf20b3db1b922b

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240426-es
resource tags

arch:x64arch:x86image:win10v2004-20240426-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
28-05-2024 14:46

Target

CADe_SIMU 4.2/Nettoplcsim-S7o-v-1-1-0-0/bin/NetToPLCsim-Manual-de.chm
Size

457KB
MD5

d154072d182820d83adad497f261ddb8
SHA1

b58281c6d178996420dd6f8f504cbb892b7c6def
SHA256

6c3dc0a9e279152a3c9738578e676d2d1757107830e64551894996db41ad512a
SHA512

0670b119fbb29a56c3b83de65267b377443ed5221fb62132ec9c805fc3badd37570880cf5738b5b07a9c6b78c17f9b9c445dd29abc6cd6f247a8b13e0d04fbaa
SSDEEP

12288:S0PNxFG31EsanesT0OX01c+dVsX4Y33psutnYUJO5O:MXeesT0vcgsPqoCO

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1576	hh.exe
1576	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\CADe_SIMU 4.2\Nettoplcsim-S7o-v-1-1-0-0\bin\NetToPLCsim-Manual-de.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1576