5d1b0d8d1e5b730373c39479269a512f29cfc564d15dd7be5ed0005d0f51366f

Analysis

max time kernel
137s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2023, 17:52

Target

1576-98-0x00000000001D0000-0x00000000001E3000-memory.dll
Size

76KB
MD5

5172443ffb1f8eea207595df2ec588c2
SHA1

07e2ea1d03492820d85109b7e7ba8c0059fc79df
SHA256

5d1b0d8d1e5b730373c39479269a512f29cfc564d15dd7be5ed0005d0f51366f
SHA512

a24a120871486cad3be4c04e9ccc2086647d59e9278f3b9d560c2d09879d655b46b9996492341f3141cf2b96bb3ac165932de5933284e9dc3a95badc54ed8fac
SSDEEP

768:UGysYcthPbMLsPwFuY2RrQI6jRdB53st+1GJ0V0ezPQdDVJb0OTrd4fJDVLOPEBK:UyFML+2YIf5YdDn/qGU1jDipO

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3080	4920	WerFault.exe	57

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1576-98-0x00000000001D0000-0x00000000001E3000-memory.dll,#1
1⤵
PID:4920
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4920 -s 244
  2⤵
  - Program crash
  PID:3080

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 420 -p 4920 -ip 4920
1⤵
PID:1492