e1dcc9c259c78a051ead4ae56f9eabdb829bb7c832fe81af6f65f6b465b7f026

Analysis

max time kernel
60s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-es
resource tags

arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
27-03-2023 05:35

Target

SkyFlick2.1_WIN11/data/drv64.dll
Size

866KB
MD5

466d8d4bd03e1ae1dfb7cd2944747808
SHA1

d779e10cec5a7457d08b9d63e2f392202d1b9c4f
SHA256

b1817ee674e9a7b9eecacb8068eb7e5d6f45052106f0fef31d9eaf7e2eaf7f15
SHA512

1d18f517ae7f0fade4768616969ba0b6c9fcd1fc2d593e5321f1826f9313c6b2f976fe737094515e9585fd0bd4fbc832d879129f80d9136a6ab861ff9b962764
SSDEEP

12288:2hE7/OAnfbSJrD6n/Im5hkK9W4Iyo4J4b4zD3PRNhhIaqcMuceZDHlBtkSpJo7wl:l7/NfaejRHIyZJdX3pNh+PcNRHtkI

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4664 4752 WerFault.exe rundll32.exe

pid	pid_target	process	target process
4664	4752	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SkyFlick2.1_WIN11\data\drv64.dll,#1
1⤵
PID:4752

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4752 -s 328
2⤵
- Program crash
PID:4664

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4752 -ip 4752
1⤵
PID:2108