2824571fc5322389b32b17cfa7e117d0ca832910780290d00b9953e9e1e039a5

Analysis

Target

2824571fc5322389b32b17cfa7e117d0ca832910780290d00b9953e9e1e039a5.exe
Size

712KB
MD5

1ad7ec789074a735ffa6a225e9cba0ad
SHA1

c2c2189550259336ef7d61967ef475a51b56db43
SHA256

2824571fc5322389b32b17cfa7e117d0ca832910780290d00b9953e9e1e039a5
SHA512

df7108a22f16472b3eebd44ae1952bff1abb340fd35a0fd078af15a2fa88feb1b71f54165a2f35fbe1467ff303d1f99448c40986d513a16bbe3f6d4e59792707

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3408	1876	WerFault.exe	80
4252	1876	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\2824571fc5322389b32b17cfa7e117d0ca832910780290d00b9953e9e1e039a5.exe
"C:\Users\Admin\AppData\Local\Temp\2824571fc5322389b32b17cfa7e117d0ca832910780290d00b9953e9e1e039a5.exe"
1⤵
PID:1876
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 488
  2⤵
  - Program crash
  PID:3408
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 492
  2⤵
  - Program crash
  PID:4252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1876 -ip 1876
1⤵
PID:896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 1876 -ip 1876
1⤵
PID:1820