1b6f29a184cb5b226cd962ed5ec3051327afa96cfdb69b16f466cf60acd0f99f

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 12:22

Target
ProduKey.chm
Size 17KB
Sample260801-pj7dpsap3s
SHA256 1b6f29a184cb5b226cd962ed5ec3051327afa96cfdb69b16f466cf60acd0f99f
MD5 a2abb7f7f1843c7ba1c63a11520d1cb5
SHA1 3d3b93903a64ec09f767f03a094711a294a84ebf
SHA512 4926a1d85bbbff9b029fea6eefce2984eda5a43163fde70482aeec5e8d49ec5ce86ddb4a8e6213287c68e41693960030832d391565c9d69001bdd3d8965827ee
SSDEEP 192:GTo4O5NDlK+1kAgg6VneeCUKp8i1zq6H0piW6Meo7XGJu/qnFSnF:GTpO5NV1kFg6XC1u6UpiW6AKUESF
TLSH
T1E472AF7151694321D0905B3FEFA63065133A94C83CF6D5E30004BEBE9EF7E49D71A26A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1392	hh.exe
1392	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\ProduKey.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1392