e96e2b3ceeddd6b5759df916e76e05fa95e1d2032b3d7602d0324cd5df82396f

Analysis

max time kernel
35s
max time network
37s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 20:34

Target

AIO [EXTRACT]/noclip.dll
Size

3.1MB
MD5

34c3df6070393fe67e9a2e113ad0eafb
SHA1

65aacab7e179854f1df14129eef218e7ada2c9c7
SHA256

4a9fd84a235270e428f1a9468c5d584881b6f8f4a13880ee78f2e8708ade35cc
SHA512

93a87f28e11b2485518e8720ee448d2edeaee93cfcf3ee098bca6382e9f31e024356cee7bae515d07da374020c6cadb69bcbc99c4def2c140d002fc099f7c04e
SSDEEP

49152:T+DvustdNfEwbcATRQyISE2YWdvhxOHTpjAO/E0mYC0qwysugGU+AfFm3OsOZiZE:Kjs1DNwFz

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1924	rundll32.exe
1924	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\AIO [EXTRACT]\noclip.dll",#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1924

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1392