df2f74d2081791ae39d47e9acf7c2f62c7df4317548307b3f3588419da5dce4e

Analysis

max time kernel
128s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
21/10/2023, 21:14

Target

NEAS.18326d12b6c95a7cbf56befabf8b0a20.exe
Size

307KB
MD5

18326d12b6c95a7cbf56befabf8b0a20
SHA1

4b74355babfac31999fdfd7cefd79939abe9d0ee
SHA256

df2f74d2081791ae39d47e9acf7c2f62c7df4317548307b3f3588419da5dce4e
SHA512

a889f3c9ac0f11a2bed51b2c373346aa9a43a221dd7d6da51f0bf0c2250178e7dbbde077306b89715b03faa55e4cb420b53887dea5c11b620ff640be394ff525
SSDEEP

768:s0jnjwtp5tj6+Zg3cmLMnP9vSOLoFjsJEI+MDiRZDiRuTtrDiRs7TsDiRb:nEt9W+Zg3fM5LujsJEKsNrtcA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2264	2732	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\NEAS.18326d12b6c95a7cbf56befabf8b0a20.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.18326d12b6c95a7cbf56befabf8b0a20.exe"
1⤵
PID:2732
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2732 -s 836
  2⤵
  - Program crash
  PID:2264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2732 -ip 2732
1⤵
PID:324

memory/2732-0-0x0000000000100000-0x0000000000152000-memory.dmp

Filesize
328KB

Download
memory/2732-1-0x0000000074A30000-0x00000000751E0000-memory.dmp

Filesize
7.7MB

Download
memory/2732-2-0x00000000050F0000-0x0000000005694000-memory.dmp

Filesize
5.6MB

Download
memory/2732-3-0x0000000004B40000-0x0000000004BD2000-memory.dmp

Filesize
584KB

Download
memory/2732-4-0x0000000074A30000-0x00000000751E0000-memory.dmp

Filesize
7.7MB

Download