39cdff6c5715ddf50fd2be798f948bf6a90e743a20c1d5fc0648269376af444b

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
10/01/2024, 01:14

Target
CefSharp.BrowserSubprocess.Core.dll
Size 902KB
Sample240110-blz6hsccc6
SHA256 85579516863977128a7ca1fcbf3dcde4b583ce14ce7b4dcb2965f6ff07f1e74a
MD5 157f580c127db1e80a4eca85d2b49153
SHA1 34f44eb55c71c7282540d2161b121792c904ebac
SHA512 892e0d9fc493e9869ac53cd9bfecb334e84e22991e627f503866fbb39214269079bfbfab6a12a3ac0287b8c17eec5f303385fbdb4254614604c96d797d2c5294
SSDEEP 24576:GDJ7i2GjleANO/Pz8ELXILZ5S0veVRCl2ZiVBhEDssQjPc8DnXoSiW+Yf3x5XrQi:q4LZ5S0veVRCl2ZiVBhEDssQjPc8DnX9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2528	2532	WerFault.exe	14

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2212 wrote to memory of 2532	2212	rundll32.exe	14
PID 2532 wrote to memory of 2528	2532	rundll32.exe	25
PID 2532 wrote to memory of 2528	2532	rundll32.exe	25
PID 2532 wrote to memory of 2528	2532	rundll32.exe	25
PID 2532 wrote to memory of 2528	2532	rundll32.exe	25

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\CefSharp.BrowserSubprocess.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2532
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 792
  2⤵
  - Program crash
  PID:2528

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\CefSharp.BrowserSubprocess.Core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2212

memory/2532-0-0x0000000002610000-0x0000000002650000-memory.dmp

Download

memory/2532-1-0x0000000004BF0000-0x0000000004CD6000-memory.dmp

Download

memory/2532-2-0x0000000002610000-0x0000000002650000-memory.dmp

Download