855c03fb9cb069d04ffc33626e3bff7a4913fd036e08d0efcbe0e17f3706aca3

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2023 11:29

Target

configuration.xml
Size

360B
MD5

1c742edf3beb1e4e9933feb3d8a9a2b2
SHA1

02f221277aa3f3c51a9e4ce59156a5538f25d3d4
SHA256

ece464e4c3843c48a840d24484a8930bc2ec7a8a6b71842a35d7de551a19ca73
SHA512

a094ee17aac8ec3705b98135b5d7a6eb4eb1a8ef97b0d42c69e564aa7f98fdc9443d09710b4dc51f1b4bba3b1b76be055f2621bc81eded388a21df19d9941f89

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1452	848	WerFault.exe	33

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\configuration.xml"
1⤵
PID:848
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 848 -s 448
  2⤵
  - Program crash
  PID:1452

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 368 -p 848 -ip 848
1⤵
PID:928

memory/848-133-0x00007FFAB25D0000-0x00007FFAB25E0000-memory.dmp

Filesize
64KB

Download
memory/848-134-0x00007FFAF2550000-0x00007FFAF2745000-memory.dmp

Filesize
2.0MB

Download
memory/848-135-0x00007FFAF2550000-0x00007FFAF2745000-memory.dmp

Filesize
2.0MB

Download
memory/848-136-0x00007FFAF0140000-0x00007FFAF0409000-memory.dmp

Filesize
2.8MB

Download
memory/848-137-0x00007FFAB25D0000-0x00007FFAB25E0000-memory.dmp

Filesize
64KB

Download
memory/848-138-0x00007FFAF2550000-0x00007FFAF2745000-memory.dmp

Filesize
2.0MB

Download