dd3f100f8dd4df4dc32b4587d47338446a239fc16c7c7938f12edfca1de29748

Analysis

max time kernel
91s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
16/09/2022, 20:47

Target

foregathering.dat.dll
Size

2.8MB
MD5

560ff04e980d8cf505916745f3ba43e4
SHA1

6098af187efa9c4f1973891c0ad1dc617564859a
SHA256

dd3f100f8dd4df4dc32b4587d47338446a239fc16c7c7938f12edfca1de29748
SHA512

7930337a653f8e2c02b7750d43307c9a60e2097c33e770547d3d2b0e9df1db3ffbf2df03d7726bcb718f97146caca7ff7e8517a0bd49eae2d4c16faa1cff5b7d
SSDEEP

24576:rKb9bASjbJSeycW5gLI+kEP02C7bswQqNLEueh0GHSeUhXedT3wH0zTgjX7Mn9Il:Gpb2Pb3jUNGVJgvIOFkinJ/5aU9/Y

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
448	4800	WerFault.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\foregathering.dat.dll,#1
1⤵
PID:4800
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4800 -s 328
  2⤵
  - Program crash
  PID:448

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 184 -p 4800 -ip 4800
1⤵
PID:4836