6a41f27d45308f281b986b4dfed2989781a0b69cbf069bc84f28e333b56d6dbf

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
26-08-2023 22:04

Target

callout_shape_5.xml
Size

3KB
MD5

3b6eb1ca75da44d8df15f66358aa7ed2
SHA1

6e43efdc6bb028ca022a2bc8bb005ad4f52f0d08
SHA256

dbac2601ec9c8909b1af9992c835313f62d2f6f8226e3e142136c8e3fa793f0a
SHA512

08f6e115d5b32e7d6c305be446f4ca9f803031486c6816a50ee981ab68f0d588247dc22f8048881e2319fcad2c935d1fcb2c25560a8a79a5500a97bf68963970

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3056 2264 WerFault.exe MSOXMLED.EXE

pid	pid_target	process	target process
3056	2264	WerFault.exe	MSOXMLED.EXE

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\callout_shape_5.xml"
1⤵
PID:2264
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2264 -s 448
  2⤵
  - Program crash
  PID:3056

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 2264 -ip 2264
1⤵
PID:2360

memory/2264-1-0x00007FF9329F0000-0x00007FF932BE5000-memory.dmp

Filesize
2.0MB

Download
memory/2264-0-0x00007FF8F2A70000-0x00007FF8F2A80000-memory.dmp

Filesize
64KB

Download
memory/2264-2-0x00007FF9329F0000-0x00007FF932BE5000-memory.dmp

Filesize
2.0MB

Download
memory/2264-3-0x00007FF9329F0000-0x00007FF932BE5000-memory.dmp

Filesize
2.0MB

Download
memory/2264-4-0x00007FF9305C0000-0x00007FF930889000-memory.dmp

Filesize
2.8MB

Download
memory/2264-5-0x00007FF8F2A70000-0x00007FF8F2A80000-memory.dmp

Filesize
64KB

Download
memory/2264-6-0x00007FF9329F0000-0x00007FF932BE5000-memory.dmp

Filesize
2.0MB

Download