3786d314f4e3906400b24657ed15fca047576eba9cf17630246db69503fdbea3

Analysis

max time kernel
124s
max time network
132s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
28-12-2024 18:38

Target

OrcusRAT-main/libraries/Sorzus.Wpf.Toolkit.dll
Size

43KB
MD5

efc2bbca9bfe174475d17e62ea0f5b4d
SHA1

3d74ba1d65245fe86cbca4cff525856e9b1755a1
SHA256

9f025d34cb7dc817df9f7f722c14eff6f2d95946ef24c486c7063d8ce9e0236f
SHA512

575a9700ea8d4fa1d470632c3654425c816b82c7a5f60c8c9787cc699961d95b2eee82ebedceaa77ec17a96329958235b3a94b6ee868e3a900bcae770506ef23
SSDEEP

768:UlvlLgCkZirns7LbkaGB/6i9C7i8ttqg4DkjSzxxaP0:Kv5gCv0At6i/GtLjSz7

Score

1^/10

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\OrcusRAT-main\libraries\Sorzus.Wpf.Toolkit.dll,#1
1⤵
PID:1064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4156,i,7725352229495460145,1654775800534747848,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
1⤵
PID:2124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=3184,i,7725352229495460145,1654775800534747848,262144 --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:8
1⤵
PID:3580