bbcc6444202f68e4154063fe28d7a5bd1dde6de140b7e80d707060bb7dbe1650

Analysis

max time kernel
119s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
18-07-2023 12:59

Target

Among Us v2022.12.14i-Pivigames.blog/Among Us_Data/StreamingAssets/aa/AddressablesLink/link.xml
Size

21KB
MD5

55d5d247dd9dac66f24bcd4600be4c7d
SHA1

74ddbb93cb18169067e00eea0d3f7f0d913eb82c
SHA256

b56aef6d9b54d0d1c219d1083b78fc39fd89707f904e896e8b4680bc22555dff
SHA512

05f38a3068a46565eef3349340c88197135573d385bfb82ab22bebe8286bba1dc43648ff9f4a6726c8f23bffac675b8f564e122e8bf7a46220449c8f6aa53daa
SSDEEP

192:/RJsF71hBg3pEFp37leqVbwuPyrTfTITrTLAUs:5Js6+Fp37O7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4360	3984	WerFault.exe	88

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Among Us v2022.12.14i-Pivigames.blog\Among Us_Data\StreamingAssets\aa\AddressablesLink\link.xml"
1⤵
PID:3984
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3984 -s 448
  2⤵
  - Program crash
  PID:4360

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 420 -p 3984 -ip 3984
1⤵
PID:1368

memory/3984-133-0x00007FFADD3D0000-0x00007FFADD3E0000-memory.dmp

Filesize
64KB

Download
memory/3984-134-0x00007FFB1D350000-0x00007FFB1D545000-memory.dmp

Filesize
2.0MB

Download
memory/3984-135-0x00007FFB1D350000-0x00007FFB1D545000-memory.dmp

Filesize
2.0MB

Download
memory/3984-136-0x00007FFB1D350000-0x00007FFB1D545000-memory.dmp

Filesize
2.0MB

Download
memory/3984-137-0x00007FFB1AFC0000-0x00007FFB1B289000-memory.dmp

Filesize
2.8MB

Download
memory/3984-138-0x00007FFADD3D0000-0x00007FFADD3E0000-memory.dmp

Filesize
64KB

Download
memory/3984-139-0x00007FFB1D350000-0x00007FFB1D545000-memory.dmp

Filesize
2.0MB

Download