f1bbcc5c678d174d858ae089f4494e3ea8bcfc418098d61804a15e437f08aff7

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
24-07-2023 06:25

Sharing

Target

Endermanch@Movie.mpeg.exe
Size

414KB
MD5

d0deb2644c9435ea701e88537787ea6e
SHA1

866e47ecd80da89c4f56557659027a3aee897132
SHA256

ad6cd46f373aadad85fab5ecdb4cb4ad7ebd0cbe44c84db5d2a2ee1b54eb5ec3
SHA512

6faac2e1003290bb3a0613ee84d5c76d3c48a4524e97975e9174d6fcfb5a6a48d6648b06ed5a4c10c3349f70efffc6a08a185fdeb0824250ae044b96ef39fcdf
SSDEEP

6144:BCoFAtv2DDWANPG4F0vwDsl6JEFiGUHzAB4lTa7tKzWNYRbvhLWxsqgyn:koOv2D60PLyvaJTT9Za7kziYD69g

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1076 2552 WerFault.exe Endermanch@Movie.mpeg.exe

pid	pid_target	process	target process
1076	2552	WerFault.exe	Endermanch@Movie.mpeg.exe

C:\Users\Admin\AppData\Local\Temp\Endermanch@Movie.mpeg.exe
"C:\Users\Admin\AppData\Local\Temp\Endermanch@Movie.mpeg.exe"
1⤵
PID:2552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2552 -s 584
2⤵
- Program crash
PID:1076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2552 -ip 2552
1⤵
PID:5068

memory/2552-133-0x0000000000D40000-0x0000000000D41000-memory.dmp

Filesize
4KB

Download
memory/2552-134-0x0000000001000000-0x00000000010CE000-memory.dmp

Filesize
824KB

Download