File name: | WinddowsUpdater.exe.7z |
Full analysis: | https://app.any.run/tasks/f5f6cf01-4d67-4e74-ac8b-630cf14f636c |
Verdict: | Malicious activity |
Analysis date: | May 20, 2022, 16:01:01 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/x-7z-compressed |
File info: | 7-zip archive data, version 0.4 |
MD5: | 6D99CA5829FCDB9AFAA8C2B2C5D1B981 |
SHA1: | F3FD3636881FA5A438FDEFB8EDB1740673249D64 |
SHA256: | 2D5023A41DB31445E77A44A43E7164A1C278E075817ABA3B4BBE19D8D8D18009 |
SSDEEP: | 12288:QxpaYBTM5CoyD4pk7kJFUA68wFETXprVLk/BXMITQcT+b7Xays8:m2xy0pkoJFVtwgVeBXvQcKb7Xays |
.7z | | | 7-Zip compressed archive (v0.4) (57.1) |
---|---|---|
.7z | | | 7-Zip compressed archive (gen) (42.8) |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2912 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\WinddowsUpdater.exe.7z" | C:\Program Files\WinRAR\WinRAR.exe | Explorer.EXE | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.91.0 | ||||
2592 | "C:\Users\admin\Desktop\WinddowsUpdater.exe" | C:\Users\admin\Desktop\WinddowsUpdater.exe | — | Explorer.EXE |
User: admin Company: AutoIt Team Integrity Level: MEDIUM Description: AutoIt v3 Script Exit code: 1 Version: 3, 3, 14, 2 | ||||
2696 | "C:\Users\admin\AppData\Local\Temp\Rar$EXb2912.22509\WinddowsUpdater.exe" | C:\Users\admin\AppData\Local\Temp\Rar$EXb2912.22509\WinddowsUpdater.exe | — | WinRAR.exe |
User: admin Company: AutoIt Team Integrity Level: MEDIUM Description: AutoIt v3 Script Exit code: 1 Version: 3, 3, 14, 2 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2912 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$EXb2912.22509\WinddowsUpdater.exe | executable | |
MD5:B06E67F9767E5023892D9698703AD098 | SHA256:8498900E57A490404E7EC4D8159BEE29AED5852AE88BD484141780EAADB727BB | |||
2912 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRb2912.12957\WinddowsUpdater.exe | executable | |
MD5:B06E67F9767E5023892D9698703AD098 | SHA256:8498900E57A490404E7EC4D8159BEE29AED5852AE88BD484141780EAADB727BB |