28291afabc83dfc51d747bb0dac4dd7875bcb16419cf6019e0409da884b3e9d1

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-09-2022 11:52

Target

3852-132-0x0000000180000000-0x0000000180009000-memory.dll
Size

36KB
MD5

3d27076b4c445e9bafafee309b11248f
SHA1

b8635e54930b3be5394723212dec9aaf9cab47bc
SHA256

28291afabc83dfc51d747bb0dac4dd7875bcb16419cf6019e0409da884b3e9d1
SHA512

4625d3293ad7ca8df8d6a1310fb6f5adad32c1769a111b172798ff5899f5b439794e416fcf17628a0e0d5b9c12a1000348706508d7a3f927bc0078c759bdbf29
SSDEEP

384:h1Mf0gJSix2AA56RCiZVYioKGQYnq/6b:zZeS6AIoiHRjCqi

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4208 4772 WerFault.exe rundll32.exe

pid	pid_target	process	target process
4208	4772	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3852-132-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
PID:4772

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4772 -s 240
2⤵
- Program crash
PID:4208

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4772 -ip 4772
1⤵
PID:1036