9c93cd60a6108167da782ab136db0779f684b4a6cfbf6e9ac570a66c31431ac2

Analysis

max time kernel
134s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08-05-2024 20:08

Target

$APPDATA/HZDP/HZDStat.exe
Size

57KB
MD5

35c6d4f3e82b90d4ee994e56db88e6a7
SHA1

c0973bfb842fa447febe566abf0d5095a143fc3e
SHA256

9117253faa8d3e3dc992c4fa792c2e20a7b2efd2bf83f9ef831e90dcc6854908
SHA512

b08d090e4351ff5fc335a4ab4e51fffff006f0114cc7463b76fe65c5bc37964bd6223ec5bff5a602a08dab0eac78f7d04f0202db2fb2c78860bbb802d68713ab
SSDEEP

1536:MqTHDfqKnxONtQUUUUUcUocboUUUUUUUUUUUrqMFUUUUUUUUUUUUYUoUU1xbPUU3:hTHD5ONiUUUUUcUocboUUUUUUUUUUUrw

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

HZDStat.exe

pid process

4564 HZDStat.exe

pid	process
4564	HZDStat.exe

C:\Users\Admin\AppData\Local\Temp\$APPDATA\HZDP\HZDStat.exe
"C:\Users\Admin\AppData\Local\Temp\$APPDATA\HZDP\HZDStat.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1036 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
1⤵
PID:2168