Overview
overview
5Static
static
3RESCALE_FREE.zip
windows10-2004-x64
1RESCALE_FREE.zip
windows11-ltsc_2024-x64
1dxgi.dll
windows10-2004-x64
1dxgi.dll
windows11-ltsc_2024-x64
1reshade-sh...des.js
windows10-2004-x64
3reshade-sh...des.js
windows11-ltsc_2024-x64
3reshade-sh...or.vbs
windows10-2004-x64
5reshade-sh...or.vbs
windows11-ltsc_2024-x64
5reshade-sh...ve.vbs
windows10-2004-x64
5reshade-sh...ve.vbs
windows11-ltsc_2024-x64
5Analysis
- max time kernel
298s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 03:44
Static task
static1
Behavioral task
behavioral1
Sample
RESCALE_FREE.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
RESCALE_FREE.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
dxgi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
dxgi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
reshade-shaders/Shaders/FXShaders/FXShaders/KeyCodes.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
reshade-shaders/Shaders/FXShaders/FXShaders/KeyCodes.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
reshade-shaders/Shaders/Fubax/CurvedMonitor.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
reshade-shaders/Shaders/Fubax/CurvedMonitor.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
reshade-shaders/Shaders/Fubax/PerfectPerspective.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
reshade-shaders/Shaders/Fubax/PerfectPerspective.vbs
Resource
win11ltsc2024-20260911-en
General
- Target dxgi.dll
- Size 4.5MB
- Sample261102-eajaeazxgv
- SHA256 1df570bc9679851b8d46b9c142b20fc9640e66db07cdfea6d4517f302a94193c
- MD5 67034d9e1814c7d39f0a747a56cfe861
- SHA1 244a218023806e69bd83276b22583efff9390156
- SHA512 e8d06730b8bb08a6c166191c009257696c185059815a07a3286016363063c60f9daf0f1ea37a2fce405b6f8337b12621986f7abfd3ce3e46c8636049314d4657
- SSDEEP 49152:Q44l0+kSEUMRQDDdqNbxFZ9mL9cw6WSSsJl7UbLEkiXFjD7W6U0l2SHXLRSXSPF1:epGRQD6Icwzq3LRH74C
- TLSH T182268D0BB3A902ACC17BC278CA375A07E6713449133096EF17A596A52F637E05B7F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3788 rundll32.exe 3788 rundll32.exe