0bddc6655ba739d631907c6b5063348789dd75356258f5aa846907342e77bec4

Analysis

max time kernel
138s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
20/11/2023, 09:23

Target

purchase_order.exe
Size

315KB
MD5

072c3199ba451fcfc9eea4d87f000ad2
SHA1

fe7990138d2c5df16eb407fd9cb828b7dad6430a
SHA256

0bddc6655ba739d631907c6b5063348789dd75356258f5aa846907342e77bec4
SHA512

3c34bf2cfe70ee20d110c245dc5271ce46b35d1167e5b52a59dfa56ae38a5552d4f0bb5ba60a494a9bf9a0ecd8dc9c2e71d582d7cc30d674a44c24bc6c363bc1
SSDEEP

6144:1oyZPhx6QTSm9+Vzq6PH1c2f6jTy3gNDzqiDe45XuvPpb8FuPdQSiiKsZtCqi/A8:NT9aH1c2f6jTy3gNDzqiDe45XuvPpbpe

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4108	1884	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\purchase_order.exe
"C:\Users\Admin\AppData\Local\Temp\purchase_order.exe"
1⤵
PID:1884
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 976
  2⤵
  - Program crash
  PID:4108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1884 -ip 1884
1⤵
PID:5044

memory/1884-0-0x0000000074D30000-0x00000000754E0000-memory.dmp

Filesize
7.7MB

Download
memory/1884-1-0x0000000000D50000-0x0000000000DA6000-memory.dmp

Filesize
344KB

Download
memory/1884-2-0x00000000031B0000-0x00000000031C0000-memory.dmp

Filesize
64KB

Download
memory/1884-3-0x00000000031A0000-0x00000000031AC000-memory.dmp

Filesize
48KB

Download
memory/1884-4-0x0000000074D30000-0x00000000754E0000-memory.dmp

Filesize
7.7MB

Download