b76ba3d165ad8317f3020420db458edbe9165a99e726527a151d39019c533711

Analysis

max time kernel
108s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2023 16:10

Target

20220119_TA580/project/_elementtree.dll
Size

124KB
MD5

23844dc840c287df4fdf3adf76a751f1
SHA1

f8cfb71363288d15a4cd8c8a34007b5020da4322
SHA256

0f35db36f3768bd096727c731aa76879650246d550c503af381cd96adee35258
SHA512

4305e3910eea3f9c55877b2fc29330d35a4da04fe6b078564fa44b2abccfa051a0e9192339292e5516a878a43a89d1ede54d02717a1a41a2777b9abac1d17c72
SSDEEP

3072:yyaTDrPxv8RwXQYk2wHC4YkTQNlyI/0O/0t/0S/0GRvnT24Z1I41f38xr:InPxv8SZk2wbnQaItWlzT24Z

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4476 5020 WerFault.exe rundll32.exe

pid	pid_target	process	target process
4476	5020	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\20220119_TA580\project\_elementtree.dll,#1
1⤵
PID:5020

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5020 -s 360
2⤵
- Program crash
PID:4476

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 372 -p 5020 -ip 5020
1⤵
PID:2000