e55b0115ad2a6564c9bb8a0f92c01eb3aa728b6ca3dfe1700665b259af5d0af6

Resubmissions

19/09/2026, 10:25

19/09/2026, 10:19

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/09/2026, 10:19

Target
itdrvbp.chm
Size 34KB
Sample260919-mcl33seb29
SHA256 e55b0115ad2a6564c9bb8a0f92c01eb3aa728b6ca3dfe1700665b259af5d0af6
MD5 f47b52420b03df0614ced7ca948c33d9
SHA1 8c39c565d1400c69eb68c5c7475e3857d2c70657
SHA512 420096e08317780252a46e5667fcd4fcc0fd4f8fabf446552c07c8158c4df035600a5cd4b12aa52e79ee2de6d21d02a9e9de4a2ed1956006a665adf4bdf583e6
SSDEEP 768:X02U4EnZVs8gGA605rl7ZII8Z++DuMZUqXq12:X0CEHs8HIqpZUqXq12
TLSH
T1C5F2E04E1E305066D8A44F3A79DBA7E63101CCC0FED7F543262E9734BA9A7085B705B6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4612	hh.exe
4612	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\itdrvbp.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4612