71d55286d6ff61f51b9a5ffb0eaf05dfaf996dd544df0655ee333f47630e3a9b

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22/02/2024, 04:29

Target

libGLESv2.dll
Size

6.8MB
MD5

69226767e1749a20ba67cc56765e335c
SHA1

a3792e3475d18d7014a1b4b94b1cf24bce083d18
SHA256

ad87f1c0600217ce6e0bdfaf443b52ed93053eae1b05a5f847f318fc9567ecce
SHA512

d05839c958d2afbe716013da1d5b4a7e7e015cfd40f46eab41d303f5d104c08e57b93396d6efe439bc3189098d875d3d177013b3b10eb9c365a0b501adee7414
SSDEEP

49152:J59vei/JY5TCnQZ3/nWhLl/07TlVMpDFR96PEtMHPZO926fbFbtf6sgylZy8Y2cH:qZ/WhR/o2Yr8rAjWedDBVm

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2864 wrote to memory of 2916	2864	rundll32.exe	28
PID 2864 wrote to memory of 2916	2864	rundll32.exe	28
PID 2864 wrote to memory of 2916	2864	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2864
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2864 -s 88
  2⤵
  PID:2916