97148ba7837b984e6a7df3db3c5934e39db3a8104a0ce81d61af945b29265d32

Analysis

max time kernel
118s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
10-08-2023 19:13

Target

2144-134-0x00007FFF9E9D0000-0x00007FFF9F3A1000-memory.dll
Size

9.8MB
MD5

520457119e3b214dbc70a76ea8883616
SHA1

d2cd42e0404b6ff7c8cf40f0aa7e8e9a54ef5e57
SHA256

97148ba7837b984e6a7df3db3c5934e39db3a8104a0ce81d61af945b29265d32
SHA512

76ea9a65f12be011fdc944533e72033ff14eae400ca915129d947e08bc8d82e4312c80929b0ce91611d11d62017da79a474b162ca8eee75a0c65d6d126f7b5b7
SSDEEP

196608:X5d4KTMvwHNKI5AQhukIm9kKI2BFBS3m0h/P/S2QYOyEF35UQRY:X5dtTLtfAQhyRKIrmqn6o9E15HRY

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2068 3448 WerFault.exe rundll32.exe

pid	pid_target	process	target process
2068	3448	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2144-134-0x00007FFF9E9D0000-0x00007FFF9F3A1000-memory.dll,#1
1⤵
PID:3448
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3448 -s 240
  2⤵
  - Program crash
  PID:2068

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 3448 -ip 3448
1⤵
PID:2060