f08130ff8f580e3bf902eec1400af45854341bbb5ccf00f669092efc76a076fa

Analysis

max time kernel
154s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17/07/2023, 03:13

Target

sticker_candy.xml
Size

1KB
MD5

cc719303ec26f5dcabf7a2f3918402ba
SHA1

ba47a088b942b0f47d8a2e262a74c18ba74a0f9e
SHA256

7cf52e65c92f0a63f25ace6599d0dbd6da960e2130e4ce5329ce510402bce679
SHA512

d25f21b7da1f1385cc95b9586546ab7aeec27043ec101f4da307aed8898b76272613799a8b5d7419303332079326bd44a79fde39f21ba56c2a7dd0379b141cf6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3452	396	WerFault.exe	84

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\sticker_candy.xml"
1⤵
PID:396
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 396 -s 472
  2⤵
  - Program crash
  PID:3452

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 396 -ip 396
1⤵
PID:908

memory/396-133-0x00007FFC92C50000-0x00007FFC92C60000-memory.dmp

Filesize
64KB

Download
memory/396-134-0x00007FFCD2BD0000-0x00007FFCD2DC5000-memory.dmp

Filesize
2.0MB

Download
memory/396-135-0x00007FFCD2BD0000-0x00007FFCD2DC5000-memory.dmp

Filesize
2.0MB

Download
memory/396-136-0x00007FFCD0760000-0x00007FFCD0A29000-memory.dmp

Filesize
2.8MB

Download
memory/396-137-0x00007FFC92C50000-0x00007FFC92C60000-memory.dmp

Filesize
64KB

Download
memory/396-138-0x00007FFCD2BD0000-0x00007FFCD2DC5000-memory.dmp

Filesize
2.0MB

Download