41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea

Analysis

max time kernel
156s
max time network
177s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2022 02:05

Target

41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe
Size

27KB
MD5

046b8d76d16a7a146e9356bed037edd0
SHA1

184151ad129c8ad13f55e96d3b067b6c4513c3d4
SHA256

41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea
SHA512

d8df75b6181754628bf210ecef9e446fc1448e92bb3030294529445c36b6fb85684d93b23a8afc7711c730ee0510706d0449aee7e2b3b005e0c6a8f492b375c0
SSDEEP

384:boZhrOlseq6Gou+0p09+fUyBV9lgxQFSuaGh+/HopQybPp1SHZ:KhieeqTpTBV91ScUYQI3Q

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4664 set thread context of 4744	4664	41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe	80

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1716	4744	WerFault.exe	80

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 4744	4664	41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe	80
PID 4664 wrote to memory of 4744	4664	41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe	80
PID 4664 wrote to memory of 4744	4664	41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe	80
PID 4664 wrote to memory of 4744	4664	41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe	80
PID 4664 wrote to memory of 4744	4664	41e947e99c587cbcb4969fe582ecd08b9024a5ab5f30f2f702c751ddabd00dea.exe	80

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4744 -ip 4744
1⤵
PID:4752

memory/4664-133-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4664-135-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4744-134-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download