370a27a30ee57247faddeb1f99a83933247e07c8760a07ed82e451e1cb5e5cdd

Analysis

max time kernel
300s
max time network
204s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
27-07-2024 17:44

Target

windirstat.chm
Size

50KB
MD5

1bddb8a0e0f9cd90a5b3936ec2c2c4cf
SHA1

c8302168fb532fe03e76cb8a82aa53b49ee0bc44
SHA256

1e87c07744054709d271337d8ce06929429b334d70875605cb68ecc4c6610cd1
SHA512

b857de9026b3eab13f4dbc464e6403835e3a61e5e9e3566735bf1ddd8dedc4ecf08807b27207bd8b385250b71ea234b301dd49e6f3c90f1270ae03868c035472
SSDEEP

768:bGA4nw8h2r+N1m0WUrKI/vjf6NDxFfC/0L7qM+ZE+ox4nnW99vpuhzK10gim:bGAT62r+N1uUll/YQZFy4nQ/uxK1Gm

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

3000 hh.exe
3000 hh.exe

pid	process
3000	hh.exe
3000	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\windirstat.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3000