d69ed8eaac9fd27a4f6b9a4f960e16b165290df379a44c87ca25a78636bfb7af

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 12:25

Target
TinyCAD.chm
Size 280KB
Sample260808-plndls1sg1
SHA256 d69ed8eaac9fd27a4f6b9a4f960e16b165290df379a44c87ca25a78636bfb7af
MD5 c8216b95e7e81421a5400356ff655054
SHA1 e7ea843298697594e5db0b14177520c55fad9868
SHA512 fb3b39afffeb4cdfa6e637320ae20bacd9d2d3903668067e8e1447a944a63a1ce82a6fd008bd4a7bec0ebb99a9db372f1c478d4d1658c5119bc21e6daf2db60d
SSDEEP 6144:rhM5PiF+Ej2sKheMxZNn207BC9wLdz+94YCR3Y:lMjNhU3U2NEI
TLSH
T149542331B2B9BAE0EEC1623A666DD3BE4BD3D5615299D6F7424D34078697F00C4A80FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
6024	hh.exe
6024	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\TinyCAD.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:6024