85e6f154baa5c3d5dcbf1b16ed811bbf643582b194d22aaeb440195640d881dd

Analysis

max time kernel
27s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
19-03-2023 12:02

Target

Netflix Checker by GOD Cracked By GM`ka/xNet/bcastdvr.proxy.dll
Size

127KB
MD5

eb1e9d853b3a71f8db7de8a1ee04a757
SHA1

175e1d12d7a6466c844d0e6551a90554b1f9c50c
SHA256

610ab0b7bee791a97e1ebb78a71897adcdad3e1db53598a1e1fba0b3cae624c3
SHA512

8987c9afa386f1fe0c54efb7f93e5abe49055568899c16625bb37f8bec4872627b159f2a7c1002b1980e29dcf6ea0757058882e73ce533f1dbf9546f6cbbd283
SSDEEP

3072:7/5xT3o7aTOPun5L6L3QP0YUj1rZlXw4qw0+Aqd6m/l8zVE37MTGEmVQkpc6mfFO:uxeF6

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

regsvr32.exe

description	pid	Process	procid_target
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28
PID 1976 wrote to memory of 1700	1976	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s "C:\Users\Admin\AppData\Local\Temp\Netflix Checker by GOD Cracked By GM`ka\xNet\bcastdvr.proxy.dll"
1⤵
- Suspicious use of WriteProcessMemory
PID:1976
- C:\Windows\SysWOW64\regsvr32.exe
  /s "C:\Users\Admin\AppData\Local\Temp\Netflix Checker by GOD Cracked By GM`ka\xNet\bcastdvr.proxy.dll"
  2⤵
  PID:1700