525a2eb43f2a4c702213723541335dc0391b42a01177e1faf5873e0cb7540ce0

Analysis

max time kernel
150s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
28-08-2024 13:34

Target

tftpd32.chm
Size

356KB
MD5

de0095e371874836fb50cd3400d7b204
SHA1

8a1000443a71417c6233f277b87ca6585bebca2a
SHA256

810a0f52703d051b30d5ecd219c72b0599964de34d1c1912367271c87d4725bf
SHA512

0bd27dcf930df12d4fc2f29caae8809be74d124946561d60a6fa0e8d775ab3baf34dbde2560bb483a348d769d39c79b9af9666daa6eb87770053736d1df474db
SSDEEP

6144:jU06ChpcJshdgk7fEPOgZLrBOhw8B84J3pCARzcy7sbqtr2YhS60gTurOQrVm:z6EcJAe3POgBTO84Hpcy+qtr22SoT4xo

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

hh.exe

pid process

3372 hh.exe
3372 hh.exe

pid	process
3372	hh.exe
3372	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\tftpd32.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:3372