371e893ea727d7c5a44d3ebe082db98a10912f6b722d1ec5d22071d7535a3af1

Analysis

max time kernel
127s
max time network
260s
platform
windows10-1703_x64
resource
win10-20230703-en
resource tags

arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
submitted
09-08-2023 12:56

Target

“护航亚运”网络安全专项整治行动方案/vcruntime140.dll
Size

106KB
MD5

49c96cecda5c6c660a107d378fdfc3d4
SHA1

00149b7a66723e3f0310f139489fe172f818ca8e
SHA256

69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc
SHA512

e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d
SSDEEP

1536:BcghDMWyjXZZIzpdbJhKm6Kuzu8fsecbq8uOFQr+zMtY+zA:BVHyQNdbJAKuzRsecbq8uOFvyU

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5084 3916 WerFault.exe rundll32.exe

pid	pid_target	process	target process
5084	3916	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\“护航亚运”网络安全专项整治行动方案\vcruntime140.dll,#1
1⤵
PID:3916

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3916 -s 276
2⤵
- Program crash
PID:5084