f08130ff8f580e3bf902eec1400af45854341bbb5ccf00f669092efc76a076fa

Analysis

max time kernel
136s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17-07-2023 03:13

Target

sticker_cake.xml
Size

18KB
MD5

b79eaa9c511000c0d9f893da3061ae8f
SHA1

9fd1f87b8691161184084bd8d7f301dda81a3513
SHA256

68e39e95e553f5dd529d7b8ab8a91b934cd46bfe3e94cba0bbf3acc864dd3a0e
SHA512

3aeb884786ceaa7cb96ab69f737e052355213d2705019d0a14194379c3afacd23dab6269e774dea665df0f11684e17908fb3e6ad19d46f5b3ddf08499166b588
SSDEEP

384:YP40IN1fnn/CBVO0P4IzdFH9WzAB2bVuB4K69Qjonn:ukx/2tPojK+Tnn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3700	1628	WerFault.exe	84

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\sticker_cake.xml"
1⤵
PID:1628
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1628 -s 456
  2⤵
  - Program crash
  PID:3700

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1628 -ip 1628
1⤵
PID:4176

memory/1628-134-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1628-133-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1628-135-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1628-136-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1628-137-0x00007FFDDB210000-0x00007FFDDB4D9000-memory.dmp

Filesize
2.8MB

Download
memory/1628-138-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1628-139-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download