6a41f27d45308f281b986b4dfed2989781a0b69cbf069bc84f28e333b56d6dbf

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
26-08-2023 22:04

Target

callout_shape_4.xml
Size

1KB
MD5

828a7ba18fb29733210cccea82833faf
SHA1

0eab9f3bb7bb221a0d54a0da3379edfa80a713ed
SHA256

fad97a809483b5b59a783e811aea993048047ae6efee1f861233a63067b7a815
SHA512

ee5fea4dce25d0bc8ea471641e4bfaa3da2305b9be2c494ae8f444e44c65494764180b5412fa7192198280b2aff420c2a76eda41f036ee87a9eb246d2a067944

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4004	2452	WerFault.exe	78

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\callout_shape_4.xml"
1⤵
PID:2452
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2452 -s 448
  2⤵
  - Program crash
  PID:4004

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 2452 -ip 2452
1⤵
PID:4796

memory/2452-0-0x00007FF802330000-0x00007FF802340000-memory.dmp

Filesize
64KB

Download
memory/2452-1-0x00007FF8422B0000-0x00007FF8424A5000-memory.dmp

Filesize
2.0MB

Download
memory/2452-2-0x00007FF8422B0000-0x00007FF8424A5000-memory.dmp

Filesize
2.0MB

Download
memory/2452-3-0x00007FF8422B0000-0x00007FF8424A5000-memory.dmp

Filesize
2.0MB

Download
memory/2452-4-0x00007FF83FE00000-0x00007FF8400C9000-memory.dmp

Filesize
2.8MB

Download
memory/2452-5-0x00007FF802330000-0x00007FF802340000-memory.dmp

Filesize
64KB

Download
memory/2452-6-0x00007FF8422B0000-0x00007FF8424A5000-memory.dmp

Filesize
2.0MB

Download