Behavioral Report

Analysis

max time kernel
70s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2023 23:08

Target

ReasonLabs/Common/Client/v1.0.7/libGLESv2.dll
Size

6MB
MD5

90dde6b1c9da6ae4c851114d87e404c4
SHA1

90feace2d0e3ba8ad73369457b559e32e6cca02f
SHA256

ead8ee25c204db0bb0c5eb3872056f27803349196b747f69deda5cbfa6da576d
SHA512

7b9a6672847913c66b808be5d438d4083502fc9d0fe1d1665dbbb835de4ec2aaa0cd1279b7606f2f3c4ddc29a24a257ab40aea231f14a2ac48f5f9451a26e047
SSDEEP

49152:q59vei/JY5TCnQZ3/nWhLl/07TlVMpDFR96PEtMHPZO926fbFbtf6sgylZy8Y2c0:dZ/WhR/o2Yr8rAjWedDUVm2

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1908 4016 WerFault.exe rundll32.exe

pid	pid_target	process	target process
1908	4016	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ReasonLabs\Common\Client\v1.0.7\libGLESv2.dll,#1
PID:4016

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4016 -s 340
- Program crash
PID:1908

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 4016 -ip 4016
PID:5008

00:00 00:00