Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 00:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
edputil.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
edputil.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\edputil.dll
command=C:\Users\Admin\AppData\Local\Temp\edputil.dll "C:\Windows\sysnative\rundll32.exe" "C:\Users<USER>\Desktop\edputil.dll",#1
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target edputil.dll
- Size 3.7MB
- Sample260602-a7149sh15y
- SHA256 83f1acece0f52dd36c2b4becaab81d2934426cde2bef64444bca152d2ba3f161
- MD5 e1a3d8643369c674222150ccc0f913d5
- SHA1 a0c7c842ccd03bc99d67acfa2e591a2e91407b44
- SHA512 1258736427f299b1545efc6288039bc6ffba0a3082346d2c696fc59f2732b208803e91a13cb985c31895935b23f4e952c9c6f2f4c3387db08e2233a729421403
- SSDEEP 49152:QAn7grScU0e/LCJ7LQzppOfCQdufBm/cBqlUtz9HHrXk9+irhnAts5aqTZyiy6/u:xM6wSppOBy00z9HHrXk9+iekQAR0
- TLSH T12C068D85AA6C01B8C43AC338890B5E17FA7C7C881371A7EB46914D5A1F777F04A3A75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10