43f40c70bee3af8015d2c61cbb7b24342915db3c6b89a80624e2f296e54d06fe

Analysis

max time kernel
132s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
22-07-2023 20:51

Target

GD/Resources/FireSheet_01-uhd.xml
Size

203KB
MD5

60f4e238767b095d28a284a533b55a6f
SHA1

723b837b3a809d771ea9e7cd981998e99b3c6002
SHA256

21deb2ca5bc607b7df8d0abd22eb55e0082e05540b7e97e468cfad6e506a57c1
SHA512

883bd310bb521cc36ad28fc3abc5f68618db10d20cd2a5a4815de27aa419087354a4bd7288baf051d66f8a8227527cd711d5472ed0c0e3b4f070062c9a560ef2
SSDEEP

1536:XdPgNUP5CKv3plKu3tRBtUckHcBLAXPt4VXj/:VgPTu9tUckHcBLAXPs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1224	1220	WerFault.exe	84

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\GD\Resources\FireSheet_01-uhd.xml"
1⤵
PID:1220
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1220 -s 448
  2⤵
  - Program crash
  PID:1224

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1220 -ip 1220
1⤵
PID:4700

memory/1220-133-0x00007FFE7DE30000-0x00007FFE7DE40000-memory.dmp

Filesize
64KB

Download
memory/1220-134-0x00007FFEBDDB0000-0x00007FFEBDFA5000-memory.dmp

Filesize
2.0MB

Download
memory/1220-135-0x00007FFEBDDB0000-0x00007FFEBDFA5000-memory.dmp

Filesize
2.0MB

Download
memory/1220-136-0x00007FFEBBB30000-0x00007FFEBBDF9000-memory.dmp

Filesize
2.8MB

Download
memory/1220-137-0x00007FFE7DE30000-0x00007FFE7DE40000-memory.dmp

Filesize
64KB

Download
memory/1220-138-0x00007FFEBDDB0000-0x00007FFEBDFA5000-memory.dmp

Filesize
2.0MB

Download