371e893ea727d7c5a44d3ebe082db98a10912f6b722d1ec5d22071d7535a3af1

Analysis

max time kernel
143s
max time network
276s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
09-08-2023 12:56

Target

“护航亚运”网络安全专项整治行动方案/msvcp140.dll
Size

564KB
MD5

1ba6d1cf0508775096f9e121a24e5863
SHA1

df552810d779476610da3c8b956cc921ed6c91ae
SHA256

74892d9b4028c05debaf0b9b5d9dc6d22f7956fa7d7eee00c681318c26792823
SHA512

9887d9f5838aa1555ea87968e014edfe2f7747f138f1b551d1f609bc1d5d8214a5fdab0d76fcac98864c1da5eb81405ca373b2a30cb12203c011d89ea6d069af
SSDEEP

12288:RBSNvy11qsslnxU/1ceqHiNHlOp/2M+UHHZpDLO+r2VhQEKZm+jWodEEVAdm:RBSDOFQEKZm+jWodEE2dm

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3392 3756 WerFault.exe rundll32.exe

pid	pid_target	process	target process
3392	3756	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\“护航亚运”网络安全专项整治行动方案\msvcp140.dll,#1
1⤵
PID:3756

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3756 -s 332
2⤵
- Program crash
PID:3392

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 3756 -ip 3756
1⤵
PID:2588