3da951c56a2b1a30bc04ab13d354d0790f97bfdb336e481e7f9af3d165ffdeb3

Analysis

max time kernel
119s
max time network
133s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
14/08/2024, 00:00

Target

D3Dcompiler_47.dll
Size

4.0MB
MD5

e3a7c7880106304bed586728b9eddd67
SHA1

83ec447319e00d5a719d9500d6790f86c40d75f6
SHA256

51d217976012c5f6e9ae67633b109dd7075319d5455e65041eb67e41f245b509
SHA512

103099f2cb16bb934fa04604f5a87fc863fc03e6c3ec44683151a0d3d5f5cff5255ef0f4ff346e6fdff5aab740e2364f9f2235dedbde05c5700b9f9f61495e09
SSDEEP

49152:sBfmqCtLI4erBYysLjG/A8McPyCD6hw16JVTW7B3EgvVlQ3LAYmyNOvGJse+aWyH:MeZevVKACOvWYQZ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 2696	2660	rundll32.exe	31
PID 2660 wrote to memory of 2696	2660	rundll32.exe	31
PID 2660 wrote to memory of 2696	2660	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\D3Dcompiler_47.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2660
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2660 -s 88
  2⤵
  PID:2696