92737be014df7e8693443418c0aed296f389ff38d1fe6977aba80e7a40859095

Analysis

max time kernel
149s
max time network
91s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 03:11

Target
BulkFileChanger.chm
Size 65KB
Sample260601-dpsxqaby71
SHA256 92737be014df7e8693443418c0aed296f389ff38d1fe6977aba80e7a40859095
MD5 4fc9a1521db073f51573d371c0c823a3
SHA1 864c7d818ea9f57e1e8b2bbbca483c672fa9a12d
SHA512 bdbec4f221ce3cca6e23523eebfd313d152395e6030339f0cd744b25961b8fdae10551827f259946abea77fdd1dbb6cdc66193244fbb2503843680a034188ccb
SSDEEP 1536:orT6M96byjtK3D993hYVB5HrKDUZi8JUBP34yTF:sT686byjtubhkLkUZDJqIyTF
TLSH
T11163F23892581A51C7FE7ABE4F5B8DF571828466B1F82748785EF0B26F3B008DD19264
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4336	hh.exe
4336	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\BulkFileChanger.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4336