6a41f27d45308f281b986b4dfed2989781a0b69cbf069bc84f28e333b56d6dbf

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
26-08-2023 22:04

Target

callout_shape_6.xml
Size

795B
MD5

05756dcdfc425a86b875a296518e5e7b
SHA1

f672a1e93bfc33b727a0d453ef66a530dad0de6f
SHA256

314286468da8ded2d9baf6c2f6c172ae3926024d60efa1b4c2aa22b0155062c2
SHA512

b19f29e3265f3198037ad6e3d5cbda6d3bf9856df9f76553c83e057c0ce5e5e22848fb264c09fb270762bbf1b97efbfef57e7fcded5cc4e55bb654657389a2e0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1456	1992	WerFault.exe	32

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\callout_shape_6.xml"
1⤵
PID:1992
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1992 -s 436
  2⤵
  - Program crash
  PID:1456

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 1992 -ip 1992
1⤵
PID:2848

memory/1992-0-0x00007FFA9BA30000-0x00007FFA9BA40000-memory.dmp

Filesize
64KB

Download
memory/1992-1-0x00007FFADB9B0000-0x00007FFADBBA5000-memory.dmp

Filesize
2.0MB

Download
memory/1992-2-0x00007FFADB9B0000-0x00007FFADBBA5000-memory.dmp

Filesize
2.0MB

Download
memory/1992-3-0x00007FFAD9730000-0x00007FFAD99F9000-memory.dmp

Filesize
2.8MB

Download
memory/1992-4-0x00007FFA9BA30000-0x00007FFA9BA40000-memory.dmp

Filesize
64KB

Download
memory/1992-5-0x00007FFADB9B0000-0x00007FFADBBA5000-memory.dmp

Filesize
2.0MB

Download