419f766cd3c22e1f6e5a506d655eb7037ff9701137251ffbd045eeef29f164a4

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 05:02

Target
FSCapture113/FSCaptureHelp.chm
Size 172KB
Sample260823-fpf92ashjf
SHA256 419f766cd3c22e1f6e5a506d655eb7037ff9701137251ffbd045eeef29f164a4
MD5 3ff07c9db0b12f66b61a4b3195f8d8de
SHA1 357e8b07a5a820e49d9ac4520a7dee2878e1574c
SHA512 16f3c7db8b4925da767b8a775dcc6498d77833ae4d5fd20c24f4b0d063cdd28e57894566c2a18afeaa533463be4e5a6e5bfa8fea4c3ebcc52de9fdddd98bb84d
SSDEEP 3072:hDb+gB0Ews3HNuRAEVkBwEypB15/NaTt1lVXnSvwOcrFah+VJEU0ZJTervo:hDHB0Ews3H+xvOt1l5SvwldJEUEerw
TLSH
T16E0412BA35C92206DC5890787ED047B1E95FDD01E9AE3793832F2F4D0EACE201D6596B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
936	hh.exe
936	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\FSCapture113\FSCaptureHelp.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:936