b6b59a54d67199717390a8f67751019b65be5aa791c2a605a564c897e21fe90e

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
07-08-2023 20:32

Target

callout_shape_6.xml
Size

795B
MD5

05756dcdfc425a86b875a296518e5e7b
SHA1

f672a1e93bfc33b727a0d453ef66a530dad0de6f
SHA256

314286468da8ded2d9baf6c2f6c172ae3926024d60efa1b4c2aa22b0155062c2
SHA512

b19f29e3265f3198037ad6e3d5cbda6d3bf9856df9f76553c83e057c0ce5e5e22848fb264c09fb270762bbf1b97efbfef57e7fcded5cc4e55bb654657389a2e0

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1376 5104 WerFault.exe MSOXMLED.EXE

pid	pid_target	process	target process
1376	5104	WerFault.exe	MSOXMLED.EXE

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\callout_shape_6.xml"
1⤵
PID:5104

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5104 -s 452
2⤵
- Program crash
PID:1376

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 5104 -ip 5104
1⤵
PID:2668

memory/5104-133-0x00007FFBE30F0000-0x00007FFBE3100000-memory.dmp

Filesize
64KB

Download
memory/5104-134-0x00007FFC23070000-0x00007FFC23265000-memory.dmp

Filesize
2.0MB

Download
memory/5104-135-0x00007FFC23070000-0x00007FFC23265000-memory.dmp

Filesize
2.0MB

Download
memory/5104-136-0x00007FFC23070000-0x00007FFC23265000-memory.dmp

Filesize
2.0MB

Download
memory/5104-137-0x00007FFC20C80000-0x00007FFC20F49000-memory.dmp

Filesize
2.8MB

Download
memory/5104-138-0x00007FFBE30F0000-0x00007FFBE3100000-memory.dmp

Filesize
64KB

Download
memory/5104-139-0x00007FFC23070000-0x00007FFC23265000-memory.dmp

Filesize
2.0MB

Download