d19ab054af55ad8342bb62dd05df9e673fad49eb74f73bfb3001d6fa46f8adb6

Resubmissions

19/09/2026, 10:25

19/09/2026, 10:19

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/09/2026, 10:19

Target
itdrven.chm
Size 32KB
Sample260919-mcl33seb29
SHA256 d19ab054af55ad8342bb62dd05df9e673fad49eb74f73bfb3001d6fa46f8adb6
MD5 7124fff9933a90214e8596f275d50cb8
SHA1 0df42e617cc628b35b87df5af77628a9930985f5
SHA512 d2c10de595407bff8f3d2fcb50683920c588d32e412c14d24b76a187fc27fa2c4d2ddb4b7054ac8163a89d9e9431f171813f1e184eed8f8351d3e26009b6768f
SSDEEP 768:zw/tWXmpgudCSzymLee/6/749rQNez5D2iwE:zytWXmUuK09roW5D2iwE
TLSH
T198E2D18B3E75C336D411AF735EC3A3D56794CA00A7E5F6022E0C5239859C36C5B746BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
728	hh.exe
728	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\itdrven.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:728