e2d9ec16ddadd92cac691a18a686003a703b77ef1b1cb7a7847f1aab6880bd6a

Analysis

max time kernel
141s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06-02-2024 21:08

Target

VirusShare_dc13e7d8c12a96c44d138bc2e3b08cc5.exe
Size

325KB
MD5

dc13e7d8c12a96c44d138bc2e3b08cc5
SHA1

29dd6a30dfea183e0fffeb31ddf1389437364a4e
SHA256

e2d9ec16ddadd92cac691a18a686003a703b77ef1b1cb7a7847f1aab6880bd6a
SHA512

17fa6571bb0c60735b824b80c6b271800c4b6278b552901effb8fa3c9fe7ef00e5413d6a5dbfa079c94c671ab1079e94ecfbf1deebba0753b26fa07fc6e1a29d
SSDEEP

6144:J03tj8he5ffi+0kAGlmECjPwiM7R5imi7Tunv+9g1:J0djJfi9GUPq7/iU8g1

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4292 5084 WerFault.exe VirusShare_dc13e7d8c12a96c44d138bc2e3b08cc5.exe

pid	pid_target	process	target process
4292	5084	WerFault.exe	VirusShare_dc13e7d8c12a96c44d138bc2e3b08cc5.exe

C:\Users\Admin\AppData\Local\Temp\VirusShare_dc13e7d8c12a96c44d138bc2e3b08cc5.exe
"C:\Users\Admin\AppData\Local\Temp\VirusShare_dc13e7d8c12a96c44d138bc2e3b08cc5.exe"
1⤵
PID:5084
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5084 -s 396
  2⤵
  - Program crash
  PID:4292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 192 -p 5084 -ip 5084
1⤵
PID:2768

memory/5084-0-0x0000000002160000-0x000000000218F000-memory.dmp

Filesize
188KB

Download
memory/5084-1-0x00000000006B0000-0x00000000006B1000-memory.dmp

Filesize
4KB

Download