9165d6fbfb3fcab53dbcc355c8c1b7bc7055ef97a9a63903fc8f23a9e994c597

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 20:36

Target

0350fd6111d1d5d147faee6c82d27f26.exe
Size

703KB
MD5

0350fd6111d1d5d147faee6c82d27f26
SHA1

f369925d5016393c0ffba5b9162df6d8e3673eb2
SHA256

9165d6fbfb3fcab53dbcc355c8c1b7bc7055ef97a9a63903fc8f23a9e994c597
SHA512

8f917da78cd1b0e98fad666f1c122bc67516074df79727556f4ef6cfeed0e9574d3e9700529bf956bf432b1b21652cb42556623e93c2610ac2dce762d4a87a14
SSDEEP

12288:mFdqs7u7oyOqNvRZ59ObXD446Pai7oyOqNvRZ59Ob3D446Pad1bvK+akZ8G:cqsq7HD+XDlqv7HD+3DlqMlvK+P9

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4468 set thread context of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3652	3968	WerFault.exe	90

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90
PID 4468 wrote to memory of 3968	4468	0350fd6111d1d5d147faee6c82d27f26.exe	90

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3968 -ip 3968
1⤵
PID:4076

memory/3968-0-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/3968-1-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/3968-2-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/3968-3-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/3968-7-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/3968-9-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/3968-8-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download
memory/4468-6-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download