a6585206dc78a09e182d037a60218ca717493777f5256bf77d529ec511ac7398

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 19:19

Target

0d6c3d145a3e95e9649cc8988701a0b0_NEAS.exe
Size

1005KB
MD5

0d6c3d145a3e95e9649cc8988701a0b0
SHA1

72d3592d5626c2a9d2e1156b9a248d3e4c9e68a2
SHA256

a6585206dc78a09e182d037a60218ca717493777f5256bf77d529ec511ac7398
SHA512

fa33ff06561810a648ae727d688db78572db066c725dc1aae1fedf10078296fba2c918d8e13ee1715f06965badc8dd6c5814140ea9c73383ae93576b13f297ec
SSDEEP

24576:kiXrlBLJG6VAkN10NseVzXKT25b3D//ak4x:hrvd5VAkNaNscb370

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5808	1396	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\0d6c3d145a3e95e9649cc8988701a0b0_NEAS.exe
"C:\Users\Admin\AppData\Local\Temp\0d6c3d145a3e95e9649cc8988701a0b0_NEAS.exe"
1⤵
PID:1396
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1396 -s 1116
  2⤵
  - Program crash
  PID:5808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1396 -ip 1396
1⤵
PID:5472

memory/1396-0-0x0000000074CDE000-0x0000000074CDF000-memory.dmp

Filesize
4KB

Download
memory/1396-1-0x0000000000D20000-0x0000000000E22000-memory.dmp

Filesize
1.0MB

Download
memory/1396-2-0x0000000005D70000-0x0000000006314000-memory.dmp

Filesize
5.6MB

Download
memory/1396-3-0x00000000056E0000-0x0000000005772000-memory.dmp

Filesize
584KB

Download
memory/1396-4-0x0000000074CD0000-0x0000000075480000-memory.dmp

Filesize
7.7MB

Download
memory/1396-5-0x00000000059C0000-0x00000000059CA000-memory.dmp

Filesize
40KB

Download
memory/1396-6-0x0000000074CD0000-0x0000000075480000-memory.dmp

Filesize
7.7MB

Download