86342235b1d74543457906df6b603f5bc9cbc555e1f188c092fb47103e486c43

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
08-08-2023 10:18

Target

4228-134-0x00007FF935330000-0x00007FF935DB4000-memory.dll
Size

10.5MB
MD5

d3291f165f4055b7beb19ba905cdbc14
SHA1

96c946e90024222107710a57c4cbef42b97527e3
SHA256

86342235b1d74543457906df6b603f5bc9cbc555e1f188c092fb47103e486c43
SHA512

b5bcdc6f7d7a3dd173b90828be860ae1c49ce916cfca2c16bece2439ad5f34087d7c8a43c846eaa40b2a457e140a2037406877f147ce95db20a6ac26a1af6811
SSDEEP

196608:bIYvCtoRw/Z7izOVJKkBumcyJ6O3LdCgPBSket86DDt0aR:0YvQoiBmzO7HhcyEcLdCgUJt8wDNR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2428 4928 WerFault.exe rundll32.exe

pid	pid_target	process	target process
2428	4928	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4228-134-0x00007FF935330000-0x00007FF935DB4000-memory.dll,#1
1⤵
PID:4928
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4928 -s 240
  2⤵
  - Program crash
  PID:2428

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 404 -p 4928 -ip 4928
1⤵
PID:1460