e96e2b3ceeddd6b5759df916e76e05fa95e1d2032b3d7602d0324cd5df82396f

Analysis

max time kernel
33s
max time network
38s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
19-07-2024 20:34

Target

AIO [EXTRACT]/noclip.dll
Size

3.1MB
MD5

34c3df6070393fe67e9a2e113ad0eafb
SHA1

65aacab7e179854f1df14129eef218e7ada2c9c7
SHA256

4a9fd84a235270e428f1a9468c5d584881b6f8f4a13880ee78f2e8708ade35cc
SHA512

93a87f28e11b2485518e8720ee448d2edeaee93cfcf3ee098bca6382e9f31e024356cee7bae515d07da374020c6cadb69bcbc99c4def2c140d002fc099f7c04e
SSDEEP

49152:T+DvustdNfEwbcATRQyISE2YWdvhxOHTpjAO/E0mYC0qwysugGU+AfFm3OsOZiZE:Kjs1DNwFz

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4648	rundll32.exe
4648	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\AIO [EXTRACT]\noclip.dll",#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4648