49c6811cbea7a607d6c50a1a013545d3f3f21d4033f3367e0f3b32bce472f0b5

Resubmissions

21/07/2023, 03:28

19/07/2023, 10:57

max time kernel
142s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2023, 10:57

Target

xx.ArPublicParams.xml
Size

485B
MD5

9bd82929fd635201ec8e8dbf51526335
SHA1

a8d5763be22ef40e9a6b627c74e7fd5d08eff633
SHA256

ad7dcad973fbddf5adef90bb8606b9e4369c776ac57a81d4b91d367a20714e6b
SHA512

cdeecdde9d09e6a6425b4ddffdd113fcab194ebc9153d345d012f5758d3f0545fb0986d765d36f4205665988f0d2c304a4862159256c79b8a909e1dd0fd1d15c

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
224	4760	WerFault.exe	71

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\xx.ArPublicParams.xml"
1⤵
PID:4760
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4760 -s 448
  2⤵
  - Program crash
  PID:224

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4760 -ip 4760
1⤵
PID:1472

memory/4760-133-0x00007FF8E4350000-0x00007FF8E4360000-memory.dmp

Filesize
64KB

Download
memory/4760-134-0x00007FF9242D0000-0x00007FF9244C5000-memory.dmp

Filesize
2.0MB

Download
memory/4760-135-0x00007FF9242D0000-0x00007FF9244C5000-memory.dmp

Filesize
2.0MB

Download
memory/4760-136-0x00007FF921FA0000-0x00007FF922269000-memory.dmp

Filesize
2.8MB

Download
memory/4760-137-0x00007FF8E4350000-0x00007FF8E4360000-memory.dmp

Filesize
64KB

Download
memory/4760-138-0x00007FF9242D0000-0x00007FF9244C5000-memory.dmp

Filesize
2.0MB

Download