acf0fd9fff53c3e9372879e0e5227379893568caa768e42c5ff67b76cb9e5315

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/08/2026, 00:23

Target
Languages/FSViewerHelp_21.chm
Size 34KB
Sample260815-aprg4swtbx
SHA256 acf0fd9fff53c3e9372879e0e5227379893568caa768e42c5ff67b76cb9e5315
MD5 ea221898539c1659453579f685b2e927
SHA1 ad5d1631a3f81aab5d6525a25789550e2f2f162d
SHA512 834bfe4ffa10103271fbc42912e4bffff31017d0dbd96c0a54833b1d692d37b78ba25c83aa5ba605678ddd1e33bafd99a01dd14c3e735fbaf5ff252851a492d0
SSDEEP 768:/yLKiJh9mpCSD8kqp4u2Jma5TcP15pONi4SNtQ/U:/yLKiL9mYSQ94u24axAUo4MtqU
TLSH
T132F2F170A634EA69F246043AE88746EFA7247DD1B967691D3831B0EE1078CFA5635383
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1280	hh.exe
1280	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Languages\FSViewerHelp_21.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:1280