a5472bb2e9ed011596aeda9be8cb8fea3bbf6b1299bff525fd3179bd7ef20eb0

Analysis

max time kernel
152s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
08-03-2023 16:12

Target

publish/bin/libatk-1.0-0.dll
Size

136KB
MD5

ce9ab2defa6d7a584152a54108c30bfc
SHA1

8b221ad2c5c428c0b73b30f9fbebd1a99186c8f1
SHA256

2a80279b8dbeec1bb9b4121ccd4801034599184dab1c9166d5a29df1fd819df9
SHA512

10a9d8e4ad9d120260273f70c2a820c10429cff86ba770ffe1cb0f57097175e1367c52b7f7a97ac29e62b09f08a2799f3c43faf9df25dd44d39fed44b25ecd89
SSDEEP

1536:lQ/IMw1Tk3vQeJEMq8iMjIV9WBmF/9yjr7YrDn8KBBIxpRu63GQsU9jDQn7BmCoU:6ETWvrEMq8iMjIfKjArDnP0EzUxDGMvU

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4004 2340 WerFault.exe rundll32.exe

pid	pid_target	process	target process
4004	2340	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\bin\libatk-1.0-0.dll,#1
1⤵
PID:2340

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2340 -s 448
2⤵
- Program crash
PID:4004

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 2340 -ip 2340
1⤵
PID:3840

memory/2340-133-0x000000006BD40000-0x000000006BD69000-memory.dmp

Filesize
164KB

Download
memory/2340-134-0x00000000649C0000-0x0000000064AE5000-memory.dmp

Filesize
1.1MB

Download
memory/2340-135-0x0000000061CC0000-0x0000000061CE8000-memory.dmp

Filesize
160KB

Download
memory/2340-136-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/2340-137-0x0000000069140000-0x000000006918E000-memory.dmp

Filesize
312KB

Download
memory/2340-138-0x0000000066000000-0x000000006610B000-memory.dmp

Filesize
1.0MB

Download
memory/2340-139-0x0000000067F00000-0x0000000067F57000-memory.dmp

Filesize
348KB

Download
memory/2340-140-0x000000006B740000-0x000000006B750000-memory.dmp

Filesize
64KB

Download