9f4aa71a0e564af882ee2afa5070e786884efa2af977ed9f67100211a0c6d8cf

Analysis

max time kernel
68s
max time network
267s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2023, 02:38

Target

ULTRAKILL.v24.12.2020-PiviGames.blog/ULTRAKILL/MonoBleedingEdge/etc/mono/2.0/web.xml
Size

11KB
MD5

2b6303c4f12762b71051db6e947f90a4
SHA1

a4d7e05516f63d6ab67327b299d4fb2852cb840b
SHA256

3c1a76a5849074b437d297656a208a3bef6d84b982153542b9c797046c601dfc
SHA512

80f5da60654e1851ef21526e434b32d94e18883a08bacbbaa0e1f85b80469c46510b6ddb9b429f16cc4be89c6f2bb2627bbae9cb1d0c7e45b665efb7721c6d86
SSDEEP

192:wcedeaZ0sEMYaWN5bs6yyzEVkEYEG/Z1f5v6CuCCrtQzPwkP/waeKjy:wj5YaWPs6/1zwya

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1648	4804	WerFault.exe	18

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ULTRAKILL.v24.12.2020-PiviGames.blog\ULTRAKILL\MonoBleedingEdge\etc\mono\2.0\web.xml"
1⤵
PID:4804
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4804 -s 448
  2⤵
  - Program crash
  PID:1648

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 384 -p 4804 -ip 4804
1⤵
PID:1044

memory/4804-0-0x00007FFAE5150000-0x00007FFAE5160000-memory.dmp

Filesize
64KB

Download
memory/4804-1-0x00007FFB250D0000-0x00007FFB252C5000-memory.dmp

Filesize
2.0MB

Download
memory/4804-2-0x00007FFB250D0000-0x00007FFB252C5000-memory.dmp

Filesize
2.0MB

Download
memory/4804-3-0x00007FFB22C30000-0x00007FFB22EF9000-memory.dmp

Filesize
2.8MB

Download
memory/4804-4-0x00007FFAE5150000-0x00007FFAE5160000-memory.dmp

Filesize
64KB

Download
memory/4804-5-0x00007FFB250D0000-0x00007FFB252C5000-memory.dmp

Filesize
2.0MB

Download