49f23bba52c17eebb7e04e11d52042d8fee8098220a8283693bf7467e02fe674

Resubmissions

21-02-2023 11:28

15-02-2023 12:25

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1340	1308	WerFault.exe	17

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1308 wrote to memory of 1340	1308	rundll32.exe	28
PID 1308 wrote to memory of 1340	1308	rundll32.exe	28
PID 1308 wrote to memory of 1340	1308	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1308
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1308 -s 84
  2⤵
  - Program crash
  PID:1340