ea03e9cc2802341e59e26a9ca3d50b6140d5f5f2892c13d81762a5b1d0c7d069

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
24-03-2023 01:47

Target

1752-55-0x0000000000310000-0x0000000000362000-memory.dll
Size

328KB
MD5

56ee53fabfb28d6671a3e8773a5a6e54
SHA1

5b38508de1ed3b9f732f742f1448d1474b8c14b7
SHA256

ea03e9cc2802341e59e26a9ca3d50b6140d5f5f2892c13d81762a5b1d0c7d069
SHA512

9284c1695067b52cc42e44ef5dc6a03b0711b6632d8232cc3abe0d49c1aebd5c1bef702995a370ef961a769f40c2a89c1f3c180b88dbe6472f2add91f0ec5672
SSDEEP

3072:rzbINhWl+CIbfqqEVxtfg8jtfDCJS4l9JTFyG+JteEzCnLgSR2YJ56vzHkNd76rv:rzbUWootfDCvT4ZTXzCLB2PVrKM

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1560 1904 WerFault.exe rundll32.exe

pid	pid_target	process	target process
1560	1904	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1752-55-0x0000000000310000-0x0000000000362000-memory.dll,#1
1⤵
PID:1904

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1904 -s 224
2⤵
- Program crash
PID:1560

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1904 -ip 1904
1⤵
PID:1960