3833d318c7163fe29a0fe11630681f4cb750fec7dc924e9f3c48251544c8ffee

Analysis

max time kernel
150s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
14-07-2024 18:46

Target

IDA Pro 8.3 (x86, x86_64)/idahelp.chm
Size

634KB
MD5

5a00b06a9760a922fc4b1330dd20438a
SHA1

3817c91e8a69e7202211783a7bda69c81c7d07bf
SHA256

34cd3d15034000880c7687c7a65f985cc413c0e4f3953230cfb508c43a48fa07
SHA512

a033a1f775eb4d5cb3ac0345cf314304340498dde44a0a059c5c021f381cc9c7e2ad51bcda935ca6d2e43d4f0a7fa2f8d6c3f12d9d80a38c29a0da935f6dc380
SSDEEP

12288:wn97pWp2Sm7rbzpCRvr9zIub6hSP2Lqi1aIxNQQ1VKBs4cXA/S:697pWIM19zIuehHq8auQQ1VGsvwa

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

4852 hh.exe
4852 hh.exe

pid	process
4852	hh.exe
4852	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\idahelp.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4852