7635079472f751071c32a41949affd5f1e70a9f01c173f8e1ba0ae41302ea97e

Analysis

max time kernel
124s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 08:09

Target

RJ01082861-PC/libGLESv2.dll
Size

3.6MB
MD5

7d33a3105dcdf326e434526eb67b8bf6
SHA1

ef2022e4be0c853947c59494fa20ebc860c77055
SHA256

1c729f6d3a8e50960a5cf9893d60c2f5fdcb1cca76baca888e3e4b8c7a742641
SHA512

96ed8020597912c95a440acf39835e57dcd0f54f82a27d25579448c08342fedac2a8489315d77dc83de06ac2eb16eb4c52856110a9756b916a2aa487522dcbf3
SSDEEP

98304:kfSh1IAsWfMGtUjSx5GFxcrig5+CU+SsRaAq7dgTyBZKb8rGXjZPgWAd:9hiFEMGUgmBZKbT43

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 372 wrote to memory of 4544	372	rundll32.exe	90
PID 372 wrote to memory of 4544	372	rundll32.exe	90
PID 372 wrote to memory of 4544	372	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\RJ01082861-PC\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:372
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\RJ01082861-PC\libGLESv2.dll,#1
  2⤵
  PID:4544