43c23200b0c8ac211c07c7367900d0c088db1cef3ddabc87e0692e14da37cd65

Analysis

max time kernel
80s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
28/12/2022, 00:19

Target

virtualFX.dll
Size

251KB
MD5

7c5db2f78f45d93a8dbdb7eaa62f757e
SHA1

863274b98897b790d280f236479756a822e26588
SHA256

6eac5f28ccdec67d3ad432d18cc99fd34d7ec95e97b50c802f6f11c491c1bdcd
SHA512

7bdb414255ba64dbbe9199d817083ab46f79aee13df89b1b915219c7dc0bca78908602981d0d269c5fa9f6cb7bfc7cea3137e9980d5389c070f4ed161d3f6b51
SSDEEP

3072:y+OwenYEz5kpvPKruNjDvNgCeTCOwfH73xNw8TiEtQBgBZVVB91Bumo3oY46dGX:KAXxjDvNqTOPzc8GohGd14XlY

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4936	4000	WerFault.exe	60

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\virtualFX.dll,#1
1⤵
PID:4000
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4000 -s 332
  2⤵
  - Program crash
  PID:4936

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 360 -p 4000 -ip 4000
1⤵
PID:2960