f08130ff8f580e3bf902eec1400af45854341bbb5ccf00f669092efc76a076fa

Analysis

max time kernel
134s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17/07/2023, 03:13

Target

sticker_basketball.xml
Size

1KB
MD5

1767916b4383d1c76e2ae70afb76b9b7
SHA1

abd7d89842725bba9892c567e002a01dd96e9d9b
SHA256

d74dc98cafc6bd883d37335b7940f6d4d37c1704a15a119653b3cb98db79c94e
SHA512

a46faf5827fcecb1c63a184c8aa45f8a6d9b80a89b6342d228afa8610063a02be079df630299192ed06ad40dec2ca0a6241769cf9ae2626f8f1dbf9821dedf36

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2360	2764	WerFault.exe	85

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\sticker_basketball.xml"
1⤵
PID:2764
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2764 -s 448
  2⤵
  - Program crash
  PID:2360

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 2764 -ip 2764
1⤵
PID:4624

memory/2764-134-0x00007FFF53930000-0x00007FFF53B25000-memory.dmp

Filesize
2.0MB

Download
memory/2764-133-0x00007FFF139B0000-0x00007FFF139C0000-memory.dmp

Filesize
64KB

Download
memory/2764-135-0x00007FFF53930000-0x00007FFF53B25000-memory.dmp

Filesize
2.0MB

Download
memory/2764-136-0x00007FFF53930000-0x00007FFF53B25000-memory.dmp

Filesize
2.0MB

Download
memory/2764-138-0x00007FFF139B0000-0x00007FFF139C0000-memory.dmp

Filesize
64KB

Download
memory/2764-137-0x00007FFF510F0000-0x00007FFF513B9000-memory.dmp

Filesize
2.8MB

Download
memory/2764-139-0x00007FFF53930000-0x00007FFF53B25000-memory.dmp

Filesize
2.0MB

Download