6769f3dcde3cc9f6fb8fd1fb6a37b52221ef79b97d5d4002c44308da7a24b144

Analysis

max time kernel
725s
max time network
857s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
21-12-2024 12:51

Target

Nursultan Alpha/dt_shmem.dll
Size

36KB
MD5

662c3d0a58aea143d2fff33f007d2ce5
SHA1

ac71b3e0aeab5b0834eff202d67701c5be1e031f
SHA256

95b94c2d3ce1e335f87dd6bfc04176dfe0ae89aa991d9ba08cef5e59c54ea0a7
SHA512

6df5683ffdf49d0f7577d13e0d897aaf3a2e0c4f9ea3004258d03f1252ebc3073f4246d95b267735cca8436109270b41e5fb619d5d1ef9e0c88da06379806f64
SSDEEP

768:tcCtsAywCYINEJk4m7EfFcOZIeYi8AMxkEoRzyn:tcCRVLm7EfFcOZIe7axt

Score

1^/10

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Nursultan Alpha\dt_shmem.dll",#1
1⤵
PID:6092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=3992,i,13034162257960464555,14563862583435181672,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
1⤵
PID:996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=3816,i,13034162257960464555,14563862583435181672,262144 --variations-seed-version --mojo-platform-channel-handle=1064 /prefetch:8
1⤵
PID:4364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=5204,i,13034162257960464555,14563862583435181672,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
1⤵
PID:6064