c2d7bd36651438dc46e8519dcaccff7fbbe838ee3e9b7f875893c7cf9a3493a1

Analysis

max time kernel
96s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 00:59

Target

hxsyfzgj_56086/YY幻想神域辅助0804/小菜破戒.exe
Size

760KB
MD5

edc7cfb7aef1925d7ece62ad826a035d
SHA1

7d11d5860bb9b9817b7e170f0a31614e132994ac
SHA256

dedea129a4d3bbd3a543f0b83e8e5cce7f38d10e3d6ec2a29de902a924af545c
SHA512

5f86de5528fa4a51c5f5151932da2d387ffbf3ea350829ef33cbc38d4700fe99b5b6c3b96b7e7a94fc2467ced96737d2e9a74e8802c89467ec69f554ff730601
SSDEEP

12288:oMC1HSAwx2if8mFgUxIX1kfzw+ryCI+DR5nWFpPoSLq:oTox2tVUaX6fzJr17ybU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2080	4040	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\hxsyfzgj_56086\YY幻想神域辅助0804\小菜破戒.exe
"C:\Users\Admin\AppData\Local\Temp\hxsyfzgj_56086\YY幻想神域辅助0804\小菜破戒.exe"
1⤵
PID:4040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4040 -s 528
  2⤵
  - Program crash
  PID:2080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4040 -ip 4040
1⤵
PID:4100

memory/4040-132-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download
memory/4040-133-0x0000000000400000-0x00000000004DD000-memory.dmp

Filesize
884KB

Download