73cb3d7601ea224b083d2348a3c1e69de9d9105e85ac501565108a88bd663ecd

Analysis

max time kernel
12s
max time network
16s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 01:37

Target

libGLESv2.dll
Size

6.8MB
MD5

b2062aa70b5177884199ef4ad7875f2f
SHA1

22cae34f6329c5e2bb3abcbb67257b009c703a9a
SHA256

b2b6f06a9db1f359309c42e9a7620e7ee8277ed375dc7f77672661a11335023f
SHA512

3ed8d31efd1f22f628b55c5782daa2f4f7008faef03afed03d6a00af04c8b5c49667d8cade04b9a7403e6fe5b54603ae71b4c539aa351c785d2b300d04383b74
SSDEEP

49152:J59vei/JY5TCnQZ3/nWhLl/07TlVMpDFR96PEtMHPZO926fbFbtf6sgylZy8Y2cH:qZ/WhR/o2Yr8rAjWedDBVm

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 2044	2876	rundll32.exe	29
PID 2876 wrote to memory of 2044	2876	rundll32.exe	29
PID 2876 wrote to memory of 2044	2876	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2876 -s 88
  2⤵
  PID:2044