Overview

overview

10

Static

static

10

UbisoftCon...er.exe

windows11-21h2-x64

7

$PLUGINSDI...ol.dll

windows11-21h2-x64

5

$PLUGINSDI...LL.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ay.dll

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ry.dll

windows11-21h2-x64

3

Microsoft....ns.dll

windows11-21h2-x64

1

UbisoftConnect.exe

windows11-21h2-x64

9

UbisoftExtension.exe

windows11-21h2-x64

5

UbisoftGam...er.exe

windows11-21h2-x64

3

UbisoftGam...64.exe

windows11-21h2-x64

1

Uninstall.exe

windows11-21h2-x64

4

UplayCrash...er.exe

windows11-21h2-x64

5

UplayService.exe

windows11-21h2-x64

5

UplayWebCore.exe

windows11-21h2-x64

3

chrome_elf.dll

windows11-21h2-x64

3

discord-rpc.x64.dll

windows11-21h2-x64

1

discord-rpc.x86.dll

windows11-21h2-x64

3

gear_core_...LL.dll

windows11-21h2-x64

3

gear_detec...LL.dll

windows11-21h2-x64

3

gpudatabase_win32.dll

windows11-21h2-x64

1

libEGL.dll

windows11-21h2-x64

3

libGLESv2.dll

windows11-21h2-x64

3

libUbiCustomEvent.dll

windows11-21h2-x64

3

libcef.dll

windows11-21h2-x64

3

npuplaypc.dll

windows11-21h2-x64

3

npuplaypchub.dll

windows11-21h2-x64

3

overlay.dll

windows11-21h2-x64

3

overlay64.dll

windows11-21h2-x64

1

shareplay/Qt5Core.dll

windows11-21h2-x64

1

shareplay/Qt5Gui.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    899s
  • max time network
    440s
  • platform
    windows11-21h2_x64
  • resource
    win11-20251223-en
  • resource tags

    arch:x64arch:x86image:win11-20251223-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    24/12/2025, 11:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    overlay64.dll
  • Size 8.6MB
  • Sample251224-n17kcsby3c
  • SHA256 f64f9a729698b55509fd68b2c80adbe0b13b59d2e2895effd15db148d4085ffd
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 34 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\overlay64.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:5472

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5472-0-0x00007FFAB1BA0000-0x00007FFAB1BA1000-memory.dmp
        Download

        memory/5472-2-0x00007FFAB1BB0000-0x00007FFAB1C6D000-memory.dmp
        Download

        memory/5472-1-0x00007FFAB1BCA000-0x00007FFAB1BCB000-memory.dmp
        Download

        memory/5472-3-0x00007FFAB1BB0000-0x00007FFAB1C6D000-memory.dmp
        Download

        memory/5472-4-0x00007FFAB1BB0000-0x00007FFAB1C6D000-memory.dmp
        Download