37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1

Login
Reports

Overview

overview

Static

static

SOLIDWORKS...32.dll

windows10-2004-x64

SOLIDWORKS...32.dll

windows11-ltsc_2024-x64

SOLIDWORKS...32.dll

windows10-2004-x64

SOLIDWORKS...32.dll

windows11-ltsc_2024-x64

SOLIDWORKS...32.dll

windows10-2004-x64

SOLIDWORKS...32.dll

windows11-ltsc_2024-x64

SOLIDWORKS...32.dll

windows10-2004-x64

SOLIDWORKS...32.dll

windows11-ltsc_2024-x64

SOLIDWORKS...cs.dll

windows10-2004-x64

SOLIDWORKS...cs.dll

windows11-ltsc_2024-x64

SOLIDWORKS...ks.dll

windows10-2004-x64

SOLIDWORKS...ks.dll

windows11-ltsc_2024-x64

SOLIDWORKS...ap.dll

windows10-2004-x64

SOLIDWORKS...ap.dll

windows11-ltsc_2024-x64

SOLIDWORKS...ks.dll

windows10-2004-x64

SOLIDWORKS...ks.dll

windows11-ltsc_2024-x64

SOLIDWORKS...ap.dll

windows10-2004-x64

SOLIDWORKS...ap.dll

windows11-ltsc_2024-x64

SOLIDWORKS...er.exe

windows10-2004-x64

SOLIDWORKS...er.exe

windows11-ltsc_2024-x64

SOLIDWORKS...re.exe

windows10-2004-x64

SOLIDWORKS...re.exe

windows11-ltsc_2024-x64

SOLIDWORKS...tu.dll

windows10-2004-x64

SOLIDWORKS...tu.dll

windows11-ltsc_2024-x64

SOLIDWORKS...ap.dll

windows10-2004-x64

SOLIDWORKS...ap.dll

windows11-ltsc_2024-x64

SOLIDWORKS...32.dll

windows10-2004-x64

SOLIDWORKS...32.dll

windows11-ltsc_2024-x64

SolidWorks...ls.exe

windows10-2004-x64

SolidWorks...ls.exe

windows11-ltsc_2024-x64

SolidWorks...rd.exe

windows10-2004-x64

SolidWorks...rd.exe

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 19:48

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

SOLIDWORKS Corp/SOLIDWORKS Composer/bin/netapi32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

SOLIDWORKS Corp/SOLIDWORKS Composer/bin/netapi32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

SOLIDWORKS Corp/SOLIDWORKS Electrical/bin/netapi32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

SOLIDWORKS Corp/SOLIDWORKS Electrical/bin/netapi32.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

SOLIDWORKS Corp/SOLIDWORKS Inspection/PDF/netapi32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

SOLIDWORKS Corp/SOLIDWORKS Inspection/PDF/netapi32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

SOLIDWORKS Corp/SOLIDWORKS Manage Client/netapi32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

SOLIDWORKS Corp/SOLIDWORKS Manage Client/netapi32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

SOLIDWORKS Corp/SOLIDWORKS PDM/StoredProcs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

SOLIDWORKS Corp/SOLIDWORKS PDM/StoredProcs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize Boost/Bunkspeed.Common.Licensing.LicensingSolidworks.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize Boost/Bunkspeed.Common.Licensing.LicensingSolidworks.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize Boost/swsecwrap.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize Boost/swsecwrap.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize/Bunkspeed.Common.Licensing.LicensingSolidworks.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize/Bunkspeed.Common.Licensing.LicensingSolidworks.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize/swsecwrap.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

SOLIDWORKS Corp/SOLIDWORKS Visualize/swsecwrap.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

SOLIDWORKS Corp/SOLIDWORKS/RTLibraryManager.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

SOLIDWORKS Corp/SOLIDWORKS/RTLibraryManager.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

SOLIDWORKS Corp/SOLIDWORKS/SldToolboxConfigure.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

SOLIDWORKS Corp/SOLIDWORKS/SldToolboxConfigure.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

SOLIDWORKS Corp/SOLIDWORKS/sldutu.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

SOLIDWORKS Corp/SOLIDWORKS/sldutu.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

SOLIDWORKS Corp/SOLIDWORKS/swsecwrap.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

SOLIDWORKS Corp/SOLIDWORKS/swsecwrap.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

SOLIDWORKS Corp/eDrawings/netapi32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

SOLIDWORKS Corp/eDrawings/netapi32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

SolidWorks_Flexnet_Server/installs.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

SolidWorks_Flexnet_Server/installs.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

SolidWorks_Flexnet_Server/lmgrd.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

SolidWorks_Flexnet_Server/lmgrd.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
SOLIDWORKS Corp/SOLIDWORKS Inspection/PDF/netapi32.dll
Size 423KB
Sample260816-yjgbyswtht
SHA256 37014d346ac9a3a715cfac404d0c6fbdd0c107f3dabc301a4cf4c643b3bafcc1
MD5 ebf35e586e43ff8647a3b7867320217d
SHA1 9c040ce7f680c32a262a8484c383590c794f1588
SHA512 d7eb47f8fd60d1a64cd59012fc3c31a0fe71df121e5ca05dbca33183397273150f963583cfca6910ba909b8605f9688a1d70b164cc4197666f0a7c9459ca9051
SSDEEP 12288:hTXOA4wjp0yPUHk36dTa9faPANFrAe7OTooi05t:5XPegl3H9FUUoi
TLSH
T1CB94E11A73980876FC7B817988931A42EB76B8025720BADF0350077BAF5B3E5793DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5784	rundll32.exe
5784	rundll32.exe
5784	rundll32.exe
5784	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SOLIDWORKS Corp\SOLIDWORKS Inspection\PDF\netapi32.dll",#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5784-0-0x00007FFCD9C00000-0x00007FFCD9CE6000-memory.dmp

Download

memory/5784-1-0x00007FFCD9C00000-0x00007FFCD9CE6000-memory.dmp

Download