9f4aa71a0e564af882ee2afa5070e786884efa2af977ed9f67100211a0c6d8cf

Analysis

max time kernel
136s
max time network
211s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2023, 02:38

Target

ULTRAKILL.v24.12.2020-PiviGames.blog/ULTRAKILL/MonoBleedingEdge/etc/mono/4.0/machine.xml
Size

32KB
MD5

24c866ce8037fcdca2287234eddff637
SHA1

9245befcd116458e9619694f1a785c50fa61b58e
SHA256

6919d5af506aae0d93e91bd83418a81895a5554b9f54cf94aad20d025a4db664
SHA512

f9960b5d5e7db35fe4a492dbba1f90cd0f0f0c4d84349baf33de3a941de57cffdec670b5be9862306503f7b5d57a697208921e7099cea13d4daf3310840ff4d2
SSDEEP

384:PbtltttttSRtNRtcRtGrRtSRtBDRp5Rt70gRt2RtTf1RDRty6ugyunHMSeuWuGR0:7Kn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5096	2616	WerFault.exe	82

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ULTRAKILL.v24.12.2020-PiviGames.blog\ULTRAKILL\MonoBleedingEdge\etc\mono\4.0\machine.xml"
1⤵
PID:2616
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2616 -s 448
  2⤵
  - Program crash
  PID:5096

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 2616 -ip 2616
1⤵
PID:3568

memory/2616-0-0x00007FFC0CCB0000-0x00007FFC0CCC0000-memory.dmp

Filesize
64KB

Download
memory/2616-1-0x00007FFC4CC30000-0x00007FFC4CE25000-memory.dmp

Filesize
2.0MB

Download
memory/2616-2-0x00007FFC4CC30000-0x00007FFC4CE25000-memory.dmp

Filesize
2.0MB

Download
memory/2616-3-0x00007FFC4A6A0000-0x00007FFC4A969000-memory.dmp

Filesize
2.8MB

Download
memory/2616-4-0x00007FFC0CCB0000-0x00007FFC0CCC0000-memory.dmp

Filesize
64KB

Download
memory/2616-5-0x00007FFC4CC30000-0x00007FFC4CE25000-memory.dmp

Filesize
2.0MB

Download