97593b69833226ed1488e6914351418018094dcedbab0984eae4648e12d8b26b

Analysis

max time kernel
1542s
max time network
1580s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
20-12-2022 20:09

Target

overcontrolling.dll
Size

1.6MB
MD5

1795382b21fad93fe3fe3d75ef40a67d
SHA1

7a6fa8a71a68e3226b6cad24cd3eff4767111e58
SHA256

97593b69833226ed1488e6914351418018094dcedbab0984eae4648e12d8b26b
SHA512

189ba19e3cbf8ca0dc02524e4d73eb53bb7408c9e451061373f797603a2ccd80d4de41756e0e896a29124d700f184279b2403a130eca0b1389f3d2aee5bad74f
SSDEEP

24576:XmJTd0nVi/Md3bupZkKBhWPRIlq5YZ6a2CXH7oZgKGc+erWJUVWyubuapwNDlaTI:XmJTd4iMwXH7oZgKb++BVL4B+NITgr0Y

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4856 4136 WerFault.exe rundll32.exe

pid	pid_target	process	target process
4856	4136	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\overcontrolling.dll,#1
1⤵
PID:4136

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4136 -s 372
2⤵
- Program crash
PID:4856

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 4136 -ip 4136
1⤵
PID:4048