fe58493f156a33a70e4bb6e1806f4d52ab687d8fe07ba688acaa18f75dcd16e2

Analysis

max time kernel
24s
max time network
31s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
05/07/2023, 12:08

Target

Components/CefSharp.BrowserSubprocess.Core.dll
Size

1.2MB
MD5

bac58aec2c0239e19272a4639d277fbc
SHA1

f96ae14d14a0289d1eeaf7a4d9c291a1c3f5fe0e
SHA256

1b49f5a29b59420fee64e51381d898998154386d4c32ae84f9e117000394be7d
SHA512

7251c0004c84b885a9b4b172f88eae5e3e2cf445cd96455e899b7577bd95f2b7d7ff56d3610943c75cc9da8a0007dcd7c33ac542de72a724df8474326d0b98fc
SSDEEP

24576:aK/H3EoQY0f0vgTyeXoiY8hQspQ8SdWHubiWyc1rQK0OXPJmlk6C:zBKf0vgTyeXoiY8hQspQ8SdWHubiWycR

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2576	2192	WerFault.exe	19

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2192 wrote to memory of 2576	2192	rundll32.exe	29
PID 2192 wrote to memory of 2576	2192	rundll32.exe	29
PID 2192 wrote to memory of 2576	2192	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Components\CefSharp.BrowserSubprocess.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2192
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2192 -s 764
  2⤵
  - Program crash
  PID:2576

memory/2192-54-0x000000001B2A0000-0x000000001B3E0000-memory.dmp

Filesize
1.2MB

Download
memory/2192-55-0x0000000002700000-0x0000000002780000-memory.dmp

Filesize
512KB

Download
memory/2192-56-0x0000000002700000-0x0000000002780000-memory.dmp

Filesize
512KB

Download