e5d3dac998fafd617d1f2bee75afb4e161b8aa924c52e997d4d1db671a7afbeb

Analysis

max time kernel
67s
max time network
63s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
02/05/2024, 13:23

Target

iDDBq.exe
Size

414KB
MD5

06261dd81ad40be9b9bd0747539a1c31
SHA1

33e7885eb9cb152da760e07e45e3197986a3970b
SHA256

e5d3dac998fafd617d1f2bee75afb4e161b8aa924c52e997d4d1db671a7afbeb
SHA512

de9279e5ab1d2a127e10dda70c0ca8556cbac1219bffdb5674446132cb814534a8fdfcdb2362a9f0601db325171473af6008c017f915c164ae59f2e053cace44
SSDEEP

12288:zF01zIdF6oIjuWhTQfKvrgFqfHwNoMgs8z9KM3dv:x01zpTeqvMoZ9KM3dv

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4028	4180	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\iDDBq.exe
"C:\Users\Admin\AppData\Local\Temp\iDDBq.exe"
1⤵
PID:4180
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 876
  2⤵
  - Program crash
  PID:4028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4180 -ip 4180
1⤵
PID:1376

C:\Windows\SysWOW64\mshta.exe
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\OpenSwitch.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
PID:3564

memory/4180-0-0x000000007489E000-0x000000007489F000-memory.dmp

Filesize
4KB

Download
memory/4180-1-0x0000000000D60000-0x0000000000DCE000-memory.dmp

Filesize
440KB

Download
memory/4180-2-0x0000000003160000-0x000000000316E000-memory.dmp

Filesize
56KB

Download
memory/4180-3-0x0000000074890000-0x0000000075040000-memory.dmp

Filesize
7.7MB

Download
memory/4180-4-0x0000000074890000-0x0000000075040000-memory.dmp

Filesize
7.7MB

Download