7c43cca0811ff5d6f7a8336b63627bd5dc239bae46ba6d4f22ac92d751bc7a5f

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 14:18

Target
onyx.exe
Size 452KB
Sample261102-rmffhaaw91
SHA256 7c43cca0811ff5d6f7a8336b63627bd5dc239bae46ba6d4f22ac92d751bc7a5f
MD5 2a4fc5263ecf8c8ef12c35f86117b3b1
SHA1 1166de22d48acb88276a65206e12de49474c54d5
SHA512 e4afd724534f7fa0963c899dac335087cc150a9c79501694f3e9f82586f428b34de56369a218bdb0a7ea9b6d02fbc6e0605ef53c8972460b873829c4db9f6d45
SSDEEP 12288:iSMXDIURteKn5OL5WmXBa5q94OPHWhHx5nudTkOf8Z0ZcvSYd6Q6CFJgP8:9FU9n5OLfXBa56P2PhIU
TLSH
T171A47C15E6E401FDE277D278C9539806EA76784A0730AADF03D095B61F276D48F3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2472	onyx.exe

C:\Users\Admin\AppData\Local\Temp\onyx.exe
"C:\Users\Admin\AppData\Local\Temp\onyx.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2472