a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

Analysis

max time kernel
142s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
01-09-2023 23:16

Target

gmpopenh264.dll
Size

997KB
MD5

fe3355639648c417e8307c6d051e3e37
SHA1

f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256

1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512

8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c
SSDEEP

12288:vYLdTfFKbNSjv92eFN+3wH+NYriA0Iq6lh6VawYIpAvwHN/Uf1h47HAfg1oet:vYLdTZ923NYrjwNpgwef1hzfg1x

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3876 4980 WerFault.exe rundll32.exe

pid	pid_target	process	target process
3876	4980	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\gmpopenh264.dll,#1
1⤵
PID:4980
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4980 -s 328
  2⤵
  - Program crash
  PID:3876

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4980 -ip 4980
1⤵
PID:884