3b4cd55de28cb39c72b4c84d6429020edbdc9ef696eaae9defaf50aaa4c64c69

Analysis

max time kernel
148s
max time network
120s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 00:23

Target
Languages/FSViewerHelp_10.chm
Size 33KB
Sample260815-aprg4swtbx
SHA256 3b4cd55de28cb39c72b4c84d6429020edbdc9ef696eaae9defaf50aaa4c64c69
MD5 899b2d9cb5346b06fea32ff1bd4ea055
SHA1 c14f49b05962202734c2857102d9c2cdc5c71e72
SHA512 432f273af7ababd883c559efe892047f4b5d53931398288371b7668defdf04fdc52596de3b539b12424a41a8adadc17616a3c2ed7480e9aeff62c2cbc372d634
SSDEEP 768:SJt3UqX3cAr8GwJNz5XghQOESG2t+PjTji3:SJGqcAr8GD8SSPj6
TLSH
T15EE2E1B97B658E91D20827BE62D718DBB1642D5628E7CF180163B74861F37803B28F4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5024	hh.exe
5024	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Languages\FSViewerHelp_10.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:5024