c2e71baefc4efbdb667f3a5c153be3d3d2521d4b856f5381a96a6a272bc21ee8

Analysis

max time kernel
23s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
15-02-2023 14:25

Target

python-3.11.2-amd64/pres/fr/dons/mig/msv/MSVidCtl.dll
Size

3.3MB
MD5

6a93c400f7d5bcf8799c0506531f7d12
SHA1

f8ecd93adfc87ae76970656bd15af3a960a83428
SHA256

6679297f7e7f17ef37f48fa25f070d78e76324d167aa8b961d85327321e58754
SHA512

209476a382bce5b53762b52c5b9f3f1bcb0d1f3b3763d1c8aa3ed6c1af838d4b442ffd7a40eb851a6c36a462031ee5fda5617dae5348426f7de3ef73b2aaec6d
SSDEEP

49152:GRVfgoQrkv0BzBQLW6Ki8gT3lZhrnxySgnpO91MmIusURfvxmtdl:GRVfgoQrkv0BVi8gT3r9xyS1jzfvx

Score

1^/10

Modifies registry class 12 IoCs

Processes:

regsvr32.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}\1.0\0\win64	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}\1.0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{9B085638-018E-11D3-9D8E-00C04F72D980}\1.0\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{156EFF60-86F4-4E28-89FC-109799FD57EE}	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\python-3.11.2-amd64\pres\fr\dons\mig\msv\MSVidCtl.dll
1⤵
- Modifies registry class
PID:1712

memory/1712-54-0x000007FEFB561000-0x000007FEFB563000-memory.dmp

Filesize
8KB

Download