9f4aa71a0e564af882ee2afa5070e786884efa2af977ed9f67100211a0c6d8cf

Analysis

max time kernel
98s
max time network
200s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2023, 02:38

Target

ULTRAKILL.v24.12.2020-PiviGames.blog/ULTRAKILL/MonoBleedingEdge/etc/mono/4.5/machine.xml
Size

33KB
MD5

0869544722561f5aff0eefc83fc7b001
SHA1

1e118f4b5c1c6a7b1858e3fccb1b1d1095561976
SHA256

ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
SHA512

ced7c9a5363cabdb87b01ed6b4ca190a690640dddf5cbcc0438acdc611a8ee942cb6cd73c78d3fc2d59f70171f22ac832a10b1e23758dc92599ee24acd978ac2
SSDEEP

384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuh:dkn

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3396	2856	WerFault.exe	83

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ULTRAKILL.v24.12.2020-PiviGames.blog\ULTRAKILL\MonoBleedingEdge\etc\mono\4.5\machine.xml"
1⤵
PID:2856
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2856 -s 448
  2⤵
  - Program crash
  PID:3396

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 192 -p 2856 -ip 2856
1⤵
PID:3904

memory/2856-1-0x00007FFFFC6F0000-0x00007FFFFC8E5000-memory.dmp

Filesize
2.0MB

Download
memory/2856-0-0x00007FFFBC770000-0x00007FFFBC780000-memory.dmp

Filesize
64KB

Download
memory/2856-2-0x00007FFFFC6F0000-0x00007FFFFC8E5000-memory.dmp

Filesize
2.0MB

Download
memory/2856-3-0x00007FFFFA0C0000-0x00007FFFFA389000-memory.dmp

Filesize
2.8MB

Download
memory/2856-4-0x00007FFFBC770000-0x00007FFFBC780000-memory.dmp

Filesize
64KB

Download
memory/2856-5-0x00007FFFFC6F0000-0x00007FFFFC8E5000-memory.dmp

Filesize
2.0MB

Download