87319e464d24195aaaeed4353371b577cbb31baf41fa898d58a5c9d4475b12e3

Analysis

max time kernel
152s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01/01/2024, 14:49

Target

川雪flash播放器/川雪flash播放器.exe
Size

1.7MB
MD5

1b914563d6539cd550a0011ec6c31e40
SHA1

5fd3128b6fb07a9f014f767d0a7875e4362d6aac
SHA256

b24cfa827abb7cf8b9a2cc935e287929c3074210c2277a27bfd683deec914d9b
SHA512

778766ab9714a4446656802ee42db2a185ea692f1ac0464aa0c5f51847dbc3f1ca49d7924b1035352256695fc33033f8ce841a67615e2bb4bcb201fd3f807298
SSDEEP

49152:Awde7hgYpKD293L9DzmuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuIuuuuuuuuuu+:q7yD295Kuuuuuuuuuuuuuuuuuuuuuuut

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1348	4464	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\川雪flash播放器\川雪flash播放器.exe
"C:\Users\Admin\AppData\Local\Temp\川雪flash播放器\川雪flash播放器.exe"
1⤵
PID:4464
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4464 -s 848
  2⤵
  - Program crash
  PID:1348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4464 -ip 4464
1⤵
PID:4628

memory/4464-0-0x0000000000750000-0x0000000000771000-memory.dmp

Filesize
132KB

Download
memory/4464-1-0x0000000000400000-0x00000000005B6000-memory.dmp

Filesize
1.7MB

Download
memory/4464-2-0x0000000000750000-0x0000000000771000-memory.dmp

Filesize
132KB

Download
memory/4464-3-0x0000000002480000-0x0000000002481000-memory.dmp

Filesize
4KB

Download
memory/4464-4-0x0000000000400000-0x00000000005B6000-memory.dmp

Filesize
1.7MB

Download
memory/4464-6-0x0000000000400000-0x00000000005B6000-memory.dmp

Filesize
1.7MB

Download
memory/4464-7-0x0000000000750000-0x0000000000771000-memory.dmp

Filesize
132KB

Download