f64e37b3b56d779c7ff1d203525a5985e5c01f6779e1c2037f1cc13b5d1dc72e

Analysis

max time kernel
134s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
20/08/2023, 13:57

Target

Lunar Client Qt/Qt5Network.dll
Size

2.6MB
MD5

94da65cb700658388a9cc3478abee446
SHA1

d6eb041d57a730ca203a00c925281bc112a99fda
SHA256

7660849b5647d0cd1c893fd0f977474df7b968bfae17cec79dbc77359f4e01f3
SHA512

d71046b4a48ee6b085d10131a4bdd77045258685d6d10cff8626e7c5ed1a02218e095dc5e3a63b57868d84ab71b41e1265b7f8cf87fe462c90e8d7ec1248e699
SSDEEP

49152:duOO43/DCdP/4O5WPkryQ/HiCn3Ihf15PA3/ITe:dtFs/dn+hPI/ge

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1268	4920	WerFault.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Lunar Client Qt\Qt5Network.dll",#1
1⤵
PID:4920
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4920 -s 640
  2⤵
  - Program crash
  PID:1268

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 412 -p 4920 -ip 4920
1⤵
PID:3764

memory/4920-133-0x0000000069700000-0x00000000698B2000-memory.dmp

Filesize
1.7MB

Download
memory/4920-134-0x0000000068880000-0x0000000068EB9000-memory.dmp

Filesize
6.2MB

Download
memory/4920-135-0x00007FF93F640000-0x00007FF93F662000-memory.dmp

Filesize
136KB

Download
memory/4920-136-0x00007FF93C4B0000-0x00007FF93C4C6000-memory.dmp

Filesize
88KB

Download
memory/4920-137-0x00007FF9365A0000-0x00007FF936793000-memory.dmp

Filesize
1.9MB

Download