6bc129664a20980b5651de1c6ade0fa9f393669c1977cfa3c5893a2b6ff2ae58

Analysis

max time kernel
95s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 09:36

Target

ValHelper9000.exe
Size

470KB
MD5

bc6fdda9b062ce01ad58f09464f0a382
SHA1

e284fb912f943d8c818748b8c0e5184ba6a8a7da
SHA256

6bc129664a20980b5651de1c6ade0fa9f393669c1977cfa3c5893a2b6ff2ae58
SHA512

8676d0474edc114e055051be71693f0fb77d46cbd716a8aae61ea27a19fb979806599bc083b6590a8551944bb9381bc2c9a9f74d6738c62be54f5bacf6c54f5c
SSDEEP

6144:MYSwba7Xq3EXPpr4UN2FVsf3vXJEt4Rx7TNwo/BnWcfRLnBA+dS1jGEvh3SNj/Hy:oa3EXFzN2Fk/MadlYmr8kE53zq5Vp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5016	628	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\ValHelper9000.exe
"C:\Users\Admin\AppData\Local\Temp\ValHelper9000.exe"
1⤵
PID:628
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 628 -s 1068
  2⤵
  - Program crash
  PID:5016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 628 -ip 628
1⤵
PID:3608

memory/628-0-0x00000000749FE000-0x00000000749FF000-memory.dmp

Filesize
4KB

Download
memory/628-1-0x0000000000120000-0x000000000019A000-memory.dmp

Filesize
488KB

Download
memory/628-2-0x0000000005000000-0x00000000055A4000-memory.dmp

Filesize
5.6MB

Download
memory/628-3-0x0000000004AF0000-0x0000000004B82000-memory.dmp

Filesize
584KB

Download
memory/628-4-0x00000000749F0000-0x00000000751A0000-memory.dmp

Filesize
7.7MB

Download
memory/628-5-0x0000000004A50000-0x0000000004A5A000-memory.dmp

Filesize
40KB

Download
memory/628-6-0x00000000749F0000-0x00000000751A0000-memory.dmp

Filesize
7.7MB

Download