2f9428fcf12b9d8a677d433062ebc720e6ae7685a36184aef06b91e55833c890

Analysis

max time kernel
125s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
23-07-2023 01:18

Target

rev_3286/FileSys.xml
Size

6KB
MD5

499e7751b019078a8a997d67e8805686
SHA1

8d3bc566a990569dcd87a4862f4ea74b5a8d7696
SHA256

bc713bc684b0bdda9342da9fa7e36caf7f328f32915144c6eca49b674917df88
SHA512

0ccb75c55eeddfaaaf658087904bfca12c520d542789527e1248785ead66bf9f3de8478b2661814f549c6ec0bf8ebaefa1ec250199b1a6e3ccf95f6f60637d12
SSDEEP

192:sYl9Bi4JFLHTSRPTsOyA0VXAQsMAy5PVzRMS6l0TE:ztJFLHTSRPTsOylXgMf9zRMV2E

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1460	3940	WerFault.exe	85

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\rev_3286\FileSys.xml"
1⤵
PID:3940
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3940 -s 448
  2⤵
  - Program crash
  PID:1460

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 3940 -ip 3940
1⤵
PID:4804

memory/3940-133-0x00007FF8AD490000-0x00007FF8AD4A0000-memory.dmp

Filesize
64KB

Download
memory/3940-134-0x00007FF8ED410000-0x00007FF8ED605000-memory.dmp

Filesize
2.0MB

Download
memory/3940-135-0x00007FF8ED410000-0x00007FF8ED605000-memory.dmp

Filesize
2.0MB

Download
memory/3940-136-0x00007FF8EAF40000-0x00007FF8EB209000-memory.dmp

Filesize
2.8MB

Download
memory/3940-137-0x00007FF8AD490000-0x00007FF8AD4A0000-memory.dmp

Filesize
64KB

Download
memory/3940-138-0x00007FF8ED410000-0x00007FF8ED605000-memory.dmp

Filesize
2.0MB

Download