5baf787e2cb8d7d476ba81ef3921e9567312222772f57977718248ab793c47bd

Analysis

max time kernel
108s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26-05-2023 11:10

Target

5baf787e2cb8d7d476ba81ef3921e9567312222772f57977718248ab793c47bd.dll
Size

1.2MB
MD5

7d3a856a0286118c64414d36735fac90
SHA1

1ebe47fc906ead0fc4e5e409b77f4e3b88c72312
SHA256

5baf787e2cb8d7d476ba81ef3921e9567312222772f57977718248ab793c47bd
SHA512

e5644e2f21386723cec5c02f6d3a1b56a229f77414829e5690c608bb8b2f935dd505b1c73777121e4608fa3bde9070327753b8d94c09e593773e0449ef73f527
SSDEEP

24576:TNdLuApxCWGo/CdRop1TgXzDYaG0CSAZT/3w7uYoomVM41qPxHLzq7ZM:zXoevT8P7K2rk7y

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1084 4964 WerFault.exe rundll32.exe

pid	pid_target	process	target process
1084	4964	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5baf787e2cb8d7d476ba81ef3921e9567312222772f57977718248ab793c47bd.dll,#1
1⤵
PID:4964

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4964 -s 336
2⤵
- Program crash
PID:1084

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 4964 -ip 4964
1⤵
PID:4020