94f53669bcad6d66c040270c760302275cf89964a94cadc0c176f8e61e6a5896

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 19:56

Target

94f53669bcad6d66c040270c760302275cf89964a94cadc0c176f8e61e6a5896.dll
Size

53KB
MD5

a3914111ee45bb06172ae329bde82270
SHA1

e902860a8b896b61a8344eed54d20d94d02d972b
SHA256

94f53669bcad6d66c040270c760302275cf89964a94cadc0c176f8e61e6a5896
SHA512

8c3a0aee5b2633547cf9eee50d3df6773b8913e2f03a90c9151f2e0d409fd3f341551f2f74d6b0be31269be05c17824024cf45da37935b649ca3562d678382a1
SSDEEP

1536:QtdzXJurc90zeJM+CrmutBKtehLl+flch:sdNhJ98BYeylch

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1336 wrote to memory of 2032	1336	regsvr32.exe	83
PID 1336 wrote to memory of 2032	1336	regsvr32.exe	83
PID 1336 wrote to memory of 2032	1336	regsvr32.exe	83

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\94f53669bcad6d66c040270c760302275cf89964a94cadc0c176f8e61e6a5896.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1336
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\94f53669bcad6d66c040270c760302275cf89964a94cadc0c176f8e61e6a5896.dll
  2⤵
  PID:2032