cdc0c1516e434c1d0c560dc147e0e7ce162d6be256a2a2b75dacc12ca8e65e9a

Analysis

max time kernel
247s
max time network
314s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2023 20:00

Target

SaveDatabase/en/mig/MSVidCtl.dll
Size

3.3MB
MD5

6a93c400f7d5bcf8799c0506531f7d12
SHA1

f8ecd93adfc87ae76970656bd15af3a960a83428
SHA256

6679297f7e7f17ef37f48fa25f070d78e76324d167aa8b961d85327321e58754
SHA512

209476a382bce5b53762b52c5b9f3f1bcb0d1f3b3763d1c8aa3ed6c1af838d4b442ffd7a40eb851a6c36a462031ee5fda5617dae5348426f7de3ef73b2aaec6d
SSDEEP

49152:GRVfgoQrkv0BzBQLW6Ki8gT3lZhrnxySgnpO91MmIusURfvxmtdl:GRVfgoQrkv0BVi8gT3r9xyS1jzfvx

Score

1^/10

Modifies registry class 12 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}\1.0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}\1.0\0\win64	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}\1.0\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\SaveDatabase\en\mig\MSVidCtl.dll
1⤵
- Modifies registry class
PID:1312