f8f82714606cee05f48930c3a8e678c28b4ccd8dd6c67553636560c3a8671ea8

Analysis

max time kernel
144s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 18:25

Target

f8f82714606cee05f48930c3a8e678c28b4ccd8dd6c67553636560c3a8671ea8.dll
Size

56KB
MD5

1394ef8599b5cdc1909e950f98595546
SHA1

f3ae416dc98cc7d534c8985c95febb7ad57a67e8
SHA256

f8f82714606cee05f48930c3a8e678c28b4ccd8dd6c67553636560c3a8671ea8
SHA512

c1b39815b997a780d3c08159c97156cf30eea24a96897be69681dda4dc148b91102497215ed770836b4c8f644fce7dcf831131387af240affbbb696781131006
SSDEEP

768:2MEyU2joCXwPaPOZxZ6pRb0x5KOVNYkllq:oyUuAC6xopRbIlYL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4168	4440	WerFault.exe	89

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4940 wrote to memory of 4440	4940	rundll32.exe	89
PID 4940 wrote to memory of 4440	4940	rundll32.exe	89
PID 4940 wrote to memory of 4440	4940	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f8f82714606cee05f48930c3a8e678c28b4ccd8dd6c67553636560c3a8671ea8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4940
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\f8f82714606cee05f48930c3a8e678c28b4ccd8dd6c67553636560c3a8671ea8.dll,#1
  2⤵
  PID:4440
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 4440 -s 548
    3⤵
    - Program crash
    PID:4168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4440 -ip 4440
1⤵
PID:2808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3740,i,3724086843943218842,1026644135694712596,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:8
1⤵
PID:4088