f5078862045a95f0167ff1292e8adeca6a9f3cea3b87e25d80e09a0095f65112

Analysis

max time kernel
139s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 12:20

Target

Compressed1/2024财务补贴.exe
Size

1.4MB
MD5

7fb66a9fc4741ca8a16064b0a8fe88e0
SHA1

4396a9cc8310cf02e86633f4715d2aa320948e43
SHA256

ecbc2f5ff29d6cf768e1d27eb1fe5feb691611c22dfa2374af9c1b21caa2e3ae
SHA512

017dbfdbe23c3d171b5cd42f4a30573c24b2f8a8319a9324660458f5e3025951c192aac515a9160021274470bdc231372c43b0e2e40b566d792d3ecd383b7be4
SSDEEP

24576:/ajO1j0dCggXp1YKy/53F9am+tDQ/frUPopzFv73OZNMeSGqE4ZDtSR:/a6zgilm/frUPUhv6SC4ZDtSR

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1708	392	WerFault.exe	91

C:\Users\Admin\AppData\Local\Temp\Compressed1\2024财务补贴.exe
"C:\Users\Admin\AppData\Local\Temp\Compressed1\2024财务补贴.exe"
1⤵
PID:392
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 392 -s 648
  2⤵
  - Program crash
  PID:1708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2756 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
1⤵
PID:3500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 392 -ip 392
1⤵
PID:5108

memory/392-0-0x0000000075930000-0x0000000075AD0000-memory.dmp

Filesize
1.6MB

Download