4ca60a0d9aabbdb62681b00618a3b3257fc3a29354b69c1110df261449b6bebe

Analysis

max time kernel
150s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/10/2026, 21:30

Target
About/Teka/Help/en-US/Help/mui/0419/odbcjet.chm
Size 91KB
Sample261016-1cs4aaxt7j
SHA256 4ca60a0d9aabbdb62681b00618a3b3257fc3a29354b69c1110df261449b6bebe
MD5 16a12239626d918884bc24b9d63d2a62
SHA1 04e1c661f50a87771e1b9b63d8453d2790419607
SHA512 45a91d4624c2d6a0f85aaed5356d32f05b7335d1ad656c1bbcacdf02c1ff1d032df78073cf0bd7fe83a997b0404019c279b7d6427b63be8b8e124d8d9eefd899
SSDEEP 1536:XLBYMBvASC4T9Ax6DficXKAH7NVjrYMCD0FDZOnQULxskVtkmGrFPCaeuCj:bqMex6Dj/NZYfsY79DUF6aep
TLSH
T12C9302F634B0C613CBA45FB99ED8A213DD9A0D4CFF12E5E925C5D53A30787009AAA173
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
876	hh.exe
876	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\About\Teka\Help\en-US\Help\mui\0419\odbcjet.chm
1⤵
- Suspicious use of SetWindowsHookEx
PID:876

hh.dat

Path C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat
Size 8KB
SHA256 de20779f0f16e6d9f68c39c7d5d0aa3ae7a4e2004857d1ca52ea0dbc441873d9
MD5 5596fa80f7fe07a5df1af7e43ad50156
SHA1 7819df35c1a3dc4c3f7063a989d7712186d45a4c
SHA512 152ac1960818ca48e2b4dfb6fa9753f593e6603fc8bbcbfd02aa09a95a62886fb0aa57a9ee382bb941705eb68941b20038b685cec1581b60a0aa509d7d215b0c
SSDEEP 12:/m6ysNMqiNMvyc0Ke0l6eohI+KKe+KjK9zh+KlE/KlEvt+KlEvdX:Jx5yc0JQ1V2FlEClEvt1lEvdX
TLSH
T1B2026D3072208120E00D8B37FFDA958B75247D42AE94555B300EF75E45B9E0E5BB05EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download