9f4aa71a0e564af882ee2afa5070e786884efa2af977ed9f67100211a0c6d8cf

Analysis

max time kernel
151s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2023, 02:38

Target

ULTRAKILL.v24.12.2020-PiviGames.blog/ULTRAKILL/MonoBleedingEdge/etc/mono/4.5/settings.xml
Size

2KB
MD5

ba17ade8a8e3ee221377534c8136f617
SHA1

8e17e2aec423a8e6fb43e8cbe6215040217bb8a3
SHA256

ce1db1ad8a9512073164e3eccdc193f7eda036e1a9733caec4635de21b2865c8
SHA512

c18bcbcbd4b9a20a72b1a934d70db1eafef047f34f3ba2c6357d8e3afed07ecaab861e5571ceb58c22d4d3e5ebb34b51e366a0553c3153fbc263d1d80472e297

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4504	3276	WerFault.exe	83

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\ULTRAKILL.v24.12.2020-PiviGames.blog\ULTRAKILL\MonoBleedingEdge\etc\mono\4.5\settings.xml"
1⤵
PID:3276
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3276 -s 440
  2⤵
  - Program crash
  PID:4504

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 440 -p 3276 -ip 3276
1⤵
PID:4620

memory/3276-1-0x00007FFC5E2B0000-0x00007FFC5E4A5000-memory.dmp

Filesize
2.0MB

Download
memory/3276-0-0x00007FFC1E330000-0x00007FFC1E340000-memory.dmp

Filesize
64KB

Download
memory/3276-2-0x00007FFC5E2B0000-0x00007FFC5E4A5000-memory.dmp

Filesize
2.0MB

Download
memory/3276-3-0x00007FFC5E2B0000-0x00007FFC5E4A5000-memory.dmp

Filesize
2.0MB

Download
memory/3276-4-0x00007FFC5BFA0000-0x00007FFC5C269000-memory.dmp

Filesize
2.8MB

Download
memory/3276-5-0x00007FFC1E330000-0x00007FFC1E340000-memory.dmp

Filesize
64KB

Download
memory/3276-6-0x00007FFC5E2B0000-0x00007FFC5E4A5000-memory.dmp

Filesize
2.0MB

Download