617f845935d428ecaf15057713f3d08a10f8257b90ee669a2afac591678bac30

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 18:40

Target

Video Enhancerv2013汉化绿色破解版/VDFilterPack/ACOBW.dll
Size

64KB
MD5

68071c78f5819f7bbf411222c213c1c4
SHA1

c5b8431a085cd6b332fa3d53ef6c0e50d772656f
SHA256

c9658c2955f3a83861e64e6b8b31a9980e40fe1f3df61973f845088aefda8fab
SHA512

f0cfbca61d4a05087466dbc668c99b60a398a98bacd213def2bb7f724faac23ebcb24f4aefb93a6c1694deed407649b362c97cfd5841a38c411d23d3f2c77936
SSDEEP

1536:gYNjxdTa/m9es/1WtMO7bfOkfLILh3Rc6W:LdTa3Zb2mM/c

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2088	1160	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 2136 wrote to memory of 1160	2136	rundll32.exe	30
PID 1160 wrote to memory of 2088	1160	rundll32.exe	31
PID 1160 wrote to memory of 2088	1160	rundll32.exe	31
PID 1160 wrote to memory of 2088	1160	rundll32.exe	31
PID 1160 wrote to memory of 2088	1160	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Video Enhancerv2013汉化绿色破解版\VDFilterPack\ACOBW.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Video Enhancerv2013汉化绿色破解版\VDFilterPack\ACOBW.dll",#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1160
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 224
    3⤵
    - Program crash
    PID:2088