14722e7a8e42e254825338be423be0e45bc901a001fc5b7a40f78843c28da323

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 00:23

Target
Languages/FSViewerHelp_5.chm
Size 33KB
Sample260815-aprg4swtbx
SHA256 14722e7a8e42e254825338be423be0e45bc901a001fc5b7a40f78843c28da323
MD5 588fd9d773360220dbb4e77f1bcfdf2b
SHA1 d78e31705bebd5af350c1ab6b603f36437e70f5d
SHA512 bd4c3a9e794f7624f1dc1ed4bed2db7fc2051507a1caea60ddd4dedb11878c960ca8c8cb0efbb012c3f5eaeca635aeb12d7cbe59182b89fa5910c2f718d61204
SSDEEP 768:kV48F3K62lsDHcmmuoUvX18/n9Kt2B7KwDpwRECctcu2DM8/:kVhdKZlgmOFg3B7KKexcq5/
TLSH
T11AF2E1F025614520CDE98B32B7341829FBB02C2599E0D60A62E6E51E5071FA16FEAB4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4912	hh.exe
4912	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\Languages\FSViewerHelp_5.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4912