add2d2999ed2b5f9ba6bcf8f851b8df8c102161d8436b80bd8ce67794c67b79e

Analysis

max time kernel
165s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
10/10/2023, 20:19

Target

3D Analyzer 2.37/3D Analyze/dat1.dll
Size

748KB
MD5

48a4d45f19aaccf446cf48fa8921b80b
SHA1

cc4aa28cc55cffa8273921beb50ec2930f6b32bb
SHA256

dfcd1b6644ecf068b273b131d8f7c74c69177125aed5806450552473922cf038
SHA512

2107d0503ec0fcf9b92aabf3761118ce735c71a39612e804989ec1c2f22d2c124ef2ee63056dd8dc5d15221d8cade6927e8519673350de8705483b6f61bb7fe1
SSDEEP

12288:cFIZI2XGMqJbjtQ3xsNofJL8ySgGWIeIhcwfdXTkQrzP7r7Dtaq:cF6InMqFjKBsNofF9GWIeeRhzPM

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2716 wrote to memory of 4644	2716	rundll32.exe	85
PID 2716 wrote to memory of 4644	2716	rundll32.exe	85
PID 2716 wrote to memory of 4644	2716	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\dat1.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2716
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\dat1.dll",#1
  2⤵
  PID:4644

C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
704B

MD5
ce53d64b245314c3a0688e12647bc2b6

SHA1
3eef438cbbd4e3534bd03054d026d2b3918adf65

SHA256
56b5a3a664ebe6ed2eb2bb95bc5ae8c5adf3f63eb877bcb3f0dee2143d0d0f64

SHA512
e8b3a51475e3295c6a4b66605f05fb494a591d141406bbc080ce9f758397f117c32b244c84642ded52715a709c26f1f23b249451e919a228a6a883a61ce98844

Download Submit
C:\Users\Admin\AppData\Local\Temp\3D Analyzer 2.37\3D Analyze\config_DX.ini

Filesize
748B

MD5
29fa2d5ea7e2b86edd97379bf3d7a98b

SHA1
22ce7cc6ec7976ca36e1b4087f706d35bd3ceb8a

SHA256
93165fdfbc8ce24aefb3fc6de83f55e58ef50f0debdca8948a749ba7ffcc8771

SHA512
277ba0df6f4a31d562f75c8c683eaed9d7a7606ec83bb7a44fd23107b5ab3fad458058fafd5d79475585e896382e2ff0aa3198c18e3f07e12e8b2b1af4dc5788

Download Submit