69a5b3f2b506f8b6f5c5f0af9829b00797766cd2e59edff9917425cf7d034c88

Analysis

max time kernel
899s
max time network
487s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 01:22

Target
VeqzCheckerV3.3.exe
Size 565KB
Sample260702-bq8cpahs2q
SHA256 69a5b3f2b506f8b6f5c5f0af9829b00797766cd2e59edff9917425cf7d034c88
MD5 f3c35146a18fb5a0cd42d68aa904cfae
SHA1 f43806b414d8a2cd382dd469375a0806404f34d3
SHA512 c7e2f0abf6ce01b354026342aa88d2937016d47e57ce6727271c8f211efda63e231e6fad6edae2121063a4caf12e44cda2bbd7d14e46f9ec2f0ca811a566d902
SSDEEP 12288:Pe1G7PgG6HNX++lmFYTyS5T6p9Ahe7uvwFMy:W11GYNLmFh4TOtG
TLSH
T1F2C48E59B69442F4D0ABC078CE924416E673784613729EEB43D09AB61F236F09F3FB60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 2748	5104	VeqzCheckerV3.3.exe	89
PID 2748 wrote to memory of 5624	2748	cmd.exe	90
PID 5104 wrote to memory of 4072	5104	VeqzCheckerV3.3.exe	91

C:\Users\Admin\AppData\Local\Temp\VeqzCheckerV3.3.exe
"C:\Users\Admin\AppData\Local\Temp\VeqzCheckerV3.3.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c mode con: cols=132 lines=44 >nul 2>nul
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2748
- - C:\Windows\system32\mode.com
    mode con: cols=132 lines=44
    3⤵
    PID:5624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4072

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2540

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4648