3ee86c04b4f72c8fa314dede0958cca899b96f019d2f67ab6f7145e1a0de5ece

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
12-07-2023 04:54

Target

2872-54-0x000007FEF56B0000-0x000007FEF5C3F000-memory.dll
Size

5.6MB
MD5

018b05ec0f91aa4c29011e8342a6415c
SHA1

1bf09bea0bce1a0ce426d53008770ec0efcbf67e
SHA256

3ee86c04b4f72c8fa314dede0958cca899b96f019d2f67ab6f7145e1a0de5ece
SHA512

ebc8d62736b3dce09e5555725c997d800e59966c0169b061f6abbd955279bfe17f7845846a0f7f8b13d0ca22341501e9180763a48167cce705266f6045ffbd15
SSDEEP

98304:F4Uckey5/2vrfnQyuNYyGQEn8c2JTNV7ziZ+tsrwWlTc1ij3421hnpZMvS:iUbROjQfWQEp2VNQMeVc1O3uvS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3464 2756 WerFault.exe rundll32.exe

pid	pid_target	process	target process
3464	2756	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2872-54-0x000007FEF56B0000-0x000007FEF5C3F000-memory.dll,#1
1⤵
PID:2756

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2756 -s 244
2⤵
- Program crash
PID:3464

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 188 -p 2756 -ip 2756
1⤵
PID:2372