359bfe0a22adb85b7db88e117936e156eb7603c77d5786c618944b4384607f27

Analysis

max time kernel
226s
max time network
215s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 10:18

Target

techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe
Size

525KB
MD5

906800a0a0379b4c61decc34d3cf31a6
SHA1

b8fdc21e2a6e0fedfd03876821eef23d8718b389
SHA256

6e84396ce4bebe8040597e2e9de1f190c192a2429ee474e15cf6d8724822b821
SHA512

052bcf42e61abbb673fb1c70db861fd7df69e7d9fea60e0684f9d9ded28cb5ecdda7f286bae24e8aea16648ba71f56f6cd7b55b48b95b243894e9240af92b8c7
SSDEEP

6144:B2ZrT0+pJrzpYUcGwk1lotp4SjMVkYRmxVtEG3vygPIJP+eh1gOmBfJ75VH/BI0g:B2Z7PqUlusV6EgB+Wiqb660F

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 176 wrote to memory of 3508	176	techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe	81
PID 176 wrote to memory of 3508	176	techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe	81
PID 176 wrote to memory of 3508	176	techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe	81
PID 176 wrote to memory of 4696	176	techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe	82
PID 176 wrote to memory of 4696	176	techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe	82
PID 176 wrote to memory of 4696	176	techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe	82

C:\Users\Admin\AppData\Local\Temp\techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe
"C:\Users\Admin\AppData\Local\Temp\techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:176
- C:\Users\Admin\AppData\Local\Temp\techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe
  start
  2⤵
  PID:3508
- C:\Users\Admin\AppData\Local\Temp\techsmith_camtasia_studio_8_4_0_1699_repack_tfile_ru.exe
  watch
  2⤵
  PID:4696

memory/176-134-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/3508-132-0x0000000000000000-mapping.dmp

Download
memory/3508-136-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/3508-139-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/3508-140-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4696-133-0x0000000000000000-mapping.dmp

Download
memory/4696-135-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4696-137-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4696-138-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download
memory/4696-141-0x0000000000400000-0x000000000048A000-memory.dmp

Filesize
552KB

Download