f6194a109f616cf68ff3c81b17e27eee9ae0583dc61b7308b088b5ca400fe3e6

Analysis

max time kernel
137s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2023, 08:24

Target

f6194a109f616cf68ff3c81b17e27eee9ae0583dc61b7308b088b5ca400fe3e6.dll
Size

1.2MB
MD5

1ad7421f3b2053a5cb2225faf3ce581b
SHA1

0a4c41460fc03a6361b3186b77e9db475d5216b1
SHA256

f6194a109f616cf68ff3c81b17e27eee9ae0583dc61b7308b088b5ca400fe3e6
SHA512

8cacb3cc504389e47d341772d763040dd25efbccc637d56e0e07f3597f84f9b67385d39f7f8c9146851d0ebb7b6e1f05fad98b4fc465c803829add1b9e7e578b
SSDEEP

24576:nbbwp9QYuu+Nj2bzGsjnI0eS2gJd1lgHzWVT5ec5jrVsKo0e:eE2RnFlgHzoTvrVsKE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1820	1516	WerFault.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f6194a109f616cf68ff3c81b17e27eee9ae0583dc61b7308b088b5ca400fe3e6.dll,#1
1⤵
PID:1516
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1516 -s 328
  2⤵
  - Program crash
  PID:1820

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1516 -ip 1516
1⤵
PID:2128