47e375f17c732d4f0790e5fef0043a13f00a862c96ea0091f7374a6b76912714

Analysis

max time kernel
140s
max time network
108s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 05:31

Target

2a171bde296657599f059d4092631a72.exe
Size

41KB
MD5

2a171bde296657599f059d4092631a72
SHA1

09352234e29a0e5da14a726fcf16371841f68789
SHA256

47e375f17c732d4f0790e5fef0043a13f00a862c96ea0091f7374a6b76912714
SHA512

43bb405456db82dd47411cc1c96b53a621f15336250c538e98c157eaadc27a0392a0c26b58557d50c5a38e606d94509c39c9ec71b464c249359d74f346991e44
SSDEEP

384:xmwcUIUsFKucozirk/eTMBXYbt22hTvY63lDlLmVaLhiO3SiAonwIn:xmw/s4zrGc2Atl9Q0hD3eTI

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1668	1392	WerFault.exe	14
3852	1392	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\2a171bde296657599f059d4092631a72.exe
"C:\Users\Admin\AppData\Local\Temp\2a171bde296657599f059d4092631a72.exe"
1⤵
PID:1392
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1392 -s 232
  2⤵
  - Program crash
  PID:1668
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1392 -s 264
  2⤵
  - Program crash
  PID:3852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1392 -ip 1392
1⤵
PID:2184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1392 -ip 1392
1⤵
PID:520