c233cf8660be3b2575a577e5077a61f2e22d7cbbc550aed839ad49bfba8c6e82

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
07-06-2024 18:18

Target

VirusShare_1395f8b044ea3fe54765cdf4bf5d242a.exe
Size

284KB
MD5

1395f8b044ea3fe54765cdf4bf5d242a
SHA1

a445159ac6d6730943e41f686e8c2a56620cec2e
SHA256

c233cf8660be3b2575a577e5077a61f2e22d7cbbc550aed839ad49bfba8c6e82
SHA512

56d5c14cbe7306181120d568ffb7541e6d749f87e2a6d87db5911b7abe2d885746eb5884c62fbb2a64cc1816128fc984df93d7fe9592e43babf973c111c1a614
SSDEEP

6144:nopeaNSNNhY8DMTyyEJTL7X2bCsUoZPZZG/bi1:geaNSNNtqqjECsZhSDi1

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

684 6052 WerFault.exe VirusShare_1395f8b044ea3fe54765cdf4bf5d242a.exe

pid	pid_target	process	target process
684	6052	WerFault.exe	VirusShare_1395f8b044ea3fe54765cdf4bf5d242a.exe

C:\Users\Admin\AppData\Local\Temp\VirusShare_1395f8b044ea3fe54765cdf4bf5d242a.exe
"C:\Users\Admin\AppData\Local\Temp\VirusShare_1395f8b044ea3fe54765cdf4bf5d242a.exe"
1⤵
PID:6052
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 6052 -s 476
  2⤵
  - Program crash
  PID:684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 6052 -ip 6052
1⤵
PID:3588

memory/6052-0-0x0000000000680000-0x00000000006AF000-memory.dmp

Filesize
188KB

Download
memory/6052-1-0x00000000006B0000-0x00000000006B1000-memory.dmp

Filesize
4KB

Download