7d201181b200b78865002f054e11579a4d29657282eff45bb11b1353834b9127

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/06/2026, 12:14

Target
FileZillaPortable/App/filezilla/FileZilla.chm
Size 284KB
Sample260627-pepcbsbs6p
SHA256 7d201181b200b78865002f054e11579a4d29657282eff45bb11b1353834b9127
MD5 84fe0ec29cb997f97cbb803bf614845c
SHA1 de93ab5990a56c9c0ce4dd99f64e2c289206fbb4
SHA512 3a44756191536d3a5c3b4140b767adce029e3da20a2c587bea7fc3c23d07686cdcf38adbb4511961f807691796c8d703f57cf84ef1c0da3dbf83637e6930e27f
SSDEEP 6144:RqAO5LedcDyEnApC6/+3HJ8uaWbepu3jhMqeXHV:Tr3Tpl+XsWSpulSV
TLSH
T1405423D08641A6D8E21DC838436AD7A79638EDBC09CEA58DAE135A1B74FC34DC4F7621
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4336	hh.exe
4336	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\FileZillaPortable\App\filezilla\FileZilla.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4336