08737d5e321c1856d6c4a2d0b52ecac883071aaca3f8f9d6852a8dc35d4e3292

Analysis

max time kernel
146s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240319-en
resource tags

arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
submitted
02-04-2024 10:06

Target

7ee6095ba8c4ed9fe11fbf5e703823e1aeae7f5443027738f55979b27ca57171.dll
Size

132KB
MD5

81e56fd3b67ce33ef7150003985be7f4
SHA1

6c739fcc6dea8cc65617ff184f1febcd5404143a
SHA256

7ee6095ba8c4ed9fe11fbf5e703823e1aeae7f5443027738f55979b27ca57171
SHA512

4b82547e9666897566318fe5fb1b0535412bbc44838288900bc534bb39a8dc8725f522ad43eec81080cf88fd5033e2112db86dc228c2e44cb9f0010e35f410c9
SSDEEP

3072:4ELogSZScYg+E/wmqpFQQT7J/AzMVWWRTBfItV74VZ:LofScb/wmqp+QPJ4zMVWWRTBgkj

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2768 2484 WerFault.exe regsvr32.exe

pid	pid_target	process	target process
2768	2484	WerFault.exe	regsvr32.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

regsvr32.exe

description	pid	process	target process
PID 552 wrote to memory of 2484	552	regsvr32.exe	regsvr32.exe
PID 552 wrote to memory of 2484	552	regsvr32.exe	regsvr32.exe
PID 552 wrote to memory of 2484	552	regsvr32.exe	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\7ee6095ba8c4ed9fe11fbf5e703823e1aeae7f5443027738f55979b27ca57171.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:552

C:\Windows\SysWOW64\regsvr32.exe
/s C:\Users\Admin\AppData\Local\Temp\7ee6095ba8c4ed9fe11fbf5e703823e1aeae7f5443027738f55979b27ca57171.dll
2⤵
PID:2484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2484 -s 600
3⤵
- Program crash
PID:2768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2484 -ip 2484
1⤵
PID:4744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1044 --field-trial-handle=2276,i,5672504106535478802,17394903851940863593,262144 --variations-seed-version /prefetch:8
1⤵
PID:4008