2088e41b0a15b59a613a35efe70ba73cf498a8e11fced9d332d9537d51743ac8

Analysis

max time kernel
91s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2022, 06:01

Target

SMBHelperClass.dll
Size

111KB
MD5

ba643404bf62d337b285f6fed4274920
SHA1

69d2ece3e0cafb839a2d8a43e40e7aa8aef8521a
SHA256

c9af59fd4b628090c2ea0a13dc4c1d4c9da9376f5c23d918c2f968458f45878b
SHA512

3496a48eb2caf9cf1c0293f2b2ee6d89fdc5eb162d5b943fce235b69ab20294b3e82911c3dc0827199dcae26bdccf1636e22da5fbd4f3bd702e93cf5a6fb433d
SSDEEP

1536:p9f3o4bHB3IiioORhOhfnq4qISOHKVdZ+xXoDB93/SgBZnKI9Of2WvXAEM:p9Po4dIiOh2nb5HKPElM3//7nZd8AR

Score

1^/10

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\FLAGS	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\0\win64	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\0\win64\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\SMBHelperClass.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\HELPDIR	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\ = "SMB Helper Class 1.0 Type Library"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\FLAGS\ = "0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0\HELPDIR\ = "C:\\Users\\Admin\\AppData\\Local\\Temp"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B792FD41-4B13-4EBA-9B5C-24C7D8C7A1E0}\1.0	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\SMBHelperClass.dll
1⤵
- Modifies registry class
PID:2400