7635079472f751071c32a41949affd5f1e70a9f01c173f8e1ba0ae41302ea97e

Analysis

max time kernel
122s
max time network
148s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24/05/2024, 08:09

Target

RJ01082861-PC/swiftshader/libGLESv2.dll
Size

2.1MB
MD5

11d36159ab5798b5b9d49a1bf958261e
SHA1

1b4d25b298105b0f18994112910fac7b393c605a
SHA256

5c4230c1b00415f6e707af374107a8a27f3b08e6a87cb63c8313433fe1f3903b
SHA512

541f183b2fc00e749b4999a3c739bd9e8806db2293534428fddf8ba6cf730f61cd1e3d902da238ef109671501a70c274db7925aa871021e77f2ec1c89c268840
SSDEEP

49152:Ilq8keUisW17Cz3kXdr3G6lA45nUFlyZji44pazwLqZNy5M4BlY4IbMsbUd35cCL:+q8keUeOLaztCWfRzyavr4MiO

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28
PID 2200 wrote to memory of 2188	2200	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\RJ01082861-PC\swiftshader\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\RJ01082861-PC\swiftshader\libGLESv2.dll,#1
  2⤵
  PID:2188