82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a

Analysis

max time kernel
91s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 21:44

Target

82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a.exe
Size

16KB
MD5

44a92379f87862168f8dd5cfc9461bcd
SHA1

59cb015f688ec329eddb1d8f3b60e9b90011c18d
SHA256

82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a
SHA512

430ed30e258b8b43ec946c5a85bdaad9b876a20b4b38551b66c912806537a1da212a0f0dbd7ab58c8ae993d3469cc4655ccf14b7d941ca83f1c650a57d13da1b
SSDEEP

192:nHD461A/0LiYxqfKD6VxEgoKWhiQ7SmSs9BWpRJCMDl+gYWRjcjZcTVdyCSY:Hsx0iYxqs6QmmSs94R1TYWBa+GCSY

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4256 set thread context of 4244	4256	82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a.exe	82

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4260	4244	WerFault.exe	82

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4256 wrote to memory of 4244	4256	82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a.exe	82
PID 4256 wrote to memory of 4244	4256	82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a.exe	82
PID 4256 wrote to memory of 4244	4256	82d66b75fc0eb95bb70e30e87c181990b1c7264b4e80ab240b8fde73390e3f8a.exe	82

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 4244 -ip 4244
1⤵
PID:3516