96fa8dfead44385de7dd264365c9cc0cbf3f649504a0ea68b1da3ecaa87af859

Analysis

max time kernel
93s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2024 11:18

Target

VirusShare_3f48d14095a78b389463ab479a067ab3.exe
Size

336KB
MD5

3f48d14095a78b389463ab479a067ab3
SHA1

a2161ff78d590864bac05b3a2d8a758495094267
SHA256

96fa8dfead44385de7dd264365c9cc0cbf3f649504a0ea68b1da3ecaa87af859
SHA512

b16d6ea6981e4245e459e536f3c07c104af8778c7b2e1ee44a85048f8d222cc95160dc0d4b5049688c4dc89f62753b60b14b44ce432e1665e073ee70d521e2fc
SSDEEP

6144:twO017IvxjY9u3x9DQhsx3GP7+Dd7yvQySmRvmdc7DrXti7O:90JIvpY9uTQhO3GSDlVyBRvIcDR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4036 4120 WerFault.exe VirusShare_3f48d14095a78b389463ab479a067ab3.exe

pid	pid_target	process	target process
4036	4120	WerFault.exe	VirusShare_3f48d14095a78b389463ab479a067ab3.exe

C:\Users\Admin\AppData\Local\Temp\VirusShare_3f48d14095a78b389463ab479a067ab3.exe
"C:\Users\Admin\AppData\Local\Temp\VirusShare_3f48d14095a78b389463ab479a067ab3.exe"
1⤵
PID:4120
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4120 -s 316
  2⤵
  - Program crash
  PID:4036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4120 -ip 4120
1⤵
PID:1608

memory/4120-0-0x0000000000780000-0x00000000007AF000-memory.dmp

Filesize
188KB

Download
memory/4120-1-0x00000000021E0000-0x00000000021E1000-memory.dmp

Filesize
4KB

Download