3a3be4d63ea60273d2a4eda55d735e5f5066d564b9512ef0852e075e684bdd46

Analysis

max time kernel
121s
max time network
137s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
31-01-2025 16:38

Target

vk_swiftshader.dll
Size

5.0MB
MD5

b06a97b925991eac3832437d7db078cd
SHA1

ca32356ba0938ada1233e13795860690712fbc14
SHA256

2df870c1719ab057ea37aa15e3e379360c1dd8eaea2eaa56cb7b026f5ee4f19f
SHA512

e1e61c28a28dfcf15d69e9ccc8e289dfe606b926e21756bbc0f21e15df18d27b1926277ffc2bd6549cdfb17f11d71c2a9353392e58c33557209b781ec32cef9e
SSDEEP

49152:Ab03fn3GIdr1DO1N8jvfWSrvOuyEE0+w7rz77gpxbhk0H4t38mvttDpSHUoeygs4:d3v3xDvRTGVgt38mvt1pSH0adU

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2768 wrote to memory of 1396	2768	rundll32.exe	30
PID 2768 wrote to memory of 1396	2768	rundll32.exe	30
PID 2768 wrote to memory of 1396	2768	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2768
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2768 -s 84
  2⤵
  PID:1396