0afeeac1c962ac4fedd58f2bd9ba5b8a99e2befede29d89405651c7373a58144

Analysis

max time kernel
138s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
08-08-2023 10:20

Target

2148-55-0x000007FEF54E0000-0x000007FEF5F64000-memory.dll
Size

10.5MB
MD5

f851a2ea7081551187eb57ea90d20b41
SHA1

8a294038f8fbba60bd3271fbdea73d68277b9070
SHA256

0afeeac1c962ac4fedd58f2bd9ba5b8a99e2befede29d89405651c7373a58144
SHA512

aa9f79a240918b71381e7400d87bd8b9c17cf0c6fba30e6d863f6590a03ea09b516a80bbf75d7a66080e44d2475916146517ec5723bbdbafb1c00f75d8623aab
SSDEEP

196608:Mi/k/zAId/X7MN4HhXkBumcyJ6O3LdCgPrSket8QDDmc6I:D/kbAMvQN4B+hcyEcLdCguJt8aDUI

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4332 4988 WerFault.exe rundll32.exe

pid	pid_target	process	target process
4332	4988	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2148-55-0x000007FEF54E0000-0x000007FEF5F64000-memory.dll,#1
1⤵
PID:4988

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4988 -s 240
2⤵
- Program crash
PID:4332

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4988 -ip 4988
1⤵
PID:4068