b931be51f58aefde0a308963de518204d7ea7422b752ddbd96d22119516d0d47

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
06-06-2024 20:37

Target

swiftshader/libGLESv2.dll
Size

2.7MB
MD5

01d26b5b8815fd05c35f707e6fd66043
SHA1

72e843f983376f1a250bda111441509bba897872
SHA256

054db533d7821f3cca25dc120525fd642b054a82f3de6a544f9759b198e88a64
SHA512

6db41be8f85d0b8826b280506a46c1cff292cf1943273ae95cc7e40f0223cf2345398cfaa96356ca8f1de7dc2df5d430e49bc7331706a590f8ebb11ee0c2e19c
SSDEEP

49152:tSCBLsGp/5RsK+57hxxy9d7JJYxU3tWLbJp0rQT9daYI9mUuXgxL9PS1b5TWnDeB:8WLsGp//0pce9TWDe87F+pmRsZDt/gxs

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe
PID 2368 wrote to memory of 2332	2368	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\swiftshader\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2368

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\swiftshader\libGLESv2.dll,#1
2⤵
PID:2332