5998b7a592d2614d624a1b4ab066b294cebbe83d2d86ee68fd670140acba115d

Resubmissions

19/09/2026, 10:25

19/09/2026, 10:19

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/09/2026, 10:19

Target
itdrvcz.chm
Size 35KB
Sample260919-mcl33seb29
SHA256 5998b7a592d2614d624a1b4ab066b294cebbe83d2d86ee68fd670140acba115d
MD5 03964a10a132c088d023a8fcb71340c4
SHA1 ff34b767eb7cab66c13989f9d585ce48ae3cbdef
SHA512 fd2a0200a436a2dda1b8e23e81bae921fad83a3e2e26ba52e1b485d3fbc3c7a6906c014d9c2dc1e878977a3e51a63992c49cc772d8bfcb019eb32aca6258f2d7
SSDEEP 768:2nxKMHnhZ9b2aYU9sKMFrwO51KLDQbhplSKBg2NnkA15oS:2x1H/9b2ktM+ObmEb9I2NnkzS
TLSH
T18DF2D0482E044335FB615F376EC3AF89A6369841F109B5861C7EB73840E3B19B6582B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4972	hh.exe
4972	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\itdrvcz.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:4972