371e893ea727d7c5a44d3ebe082db98a10912f6b722d1ec5d22071d7535a3af1

Analysis

max time kernel
117s
max time network
259s
platform
windows10-1703_x64
resource
win10-20230703-en
resource tags

arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
submitted
09/08/2023, 12:56

Target

“护航亚运”网络安全专项整治行动方案/msvcp140.dll
Size

564KB
MD5

1ba6d1cf0508775096f9e121a24e5863
SHA1

df552810d779476610da3c8b956cc921ed6c91ae
SHA256

74892d9b4028c05debaf0b9b5d9dc6d22f7956fa7d7eee00c681318c26792823
SHA512

9887d9f5838aa1555ea87968e014edfe2f7747f138f1b551d1f609bc1d5d8214a5fdab0d76fcac98864c1da5eb81405ca373b2a30cb12203c011d89ea6d069af
SSDEEP

12288:RBSNvy11qsslnxU/1ceqHiNHlOp/2M+UHHZpDLO+r2VhQEKZm+jWodEEVAdm:RBSDOFQEKZm+jWodEE2dm

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1480	4124	WerFault.exe	69

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\“护航亚运”网络安全专项整治行动方案\msvcp140.dll,#1
1⤵
PID:4124
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4124 -s 276
  2⤵
  - Program crash
  PID:1480