847855f8cb54a48426e9cb2043504cddcee154e4f923175665218dc1104a43fc

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 00:23

Target
Languages/FSViewerHelp_13.chm
Size 32KB
Sample260815-aprg4swtbx
SHA256 847855f8cb54a48426e9cb2043504cddcee154e4f923175665218dc1104a43fc
MD5 98177b80ac74dd1911e6ca99ef869d30
SHA1 f3762355e29961633192f4c648498705986337cb
SHA512 5a3abc7fc68dd22579d5be988392f7bc1a3903b3a1608120910084b190e4234949dd182d91134535334145c3df10b20e0dbddcc58aab7865134973660486348d
SSDEEP 768:Rw+0z1PWzY7ut7dOTRx15xkrenAIwDQ/v5wlAMExt8KJiOrW:Rw7zxWzYut7ETRxy+wDQ/velAv8qvrW
TLSH
T149E2E1F63A40C471F45109322AAF7585FFD63C9EE27A43CC848F251C68B1A145B386CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4924	hh.exe
4924	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Languages\FSViewerHelp_13.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4924