5e1042421ba29d16c34d686c701cb77cee14ff6c08984c7fa2a9860eea480259

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 06:13

Target
AppVIsvSubsystems64.dll
Size 224KB
Sample260808-gy5jnavvhw
SHA256 5e1042421ba29d16c34d686c701cb77cee14ff6c08984c7fa2a9860eea480259
MD5 ed82975e464d69cd57ded15c354b1024
SHA1 843fbfb5349e578878a08b68e9cb4b759d26b3e8
SHA512 9cfd3958dca128def08acd4c77916f6d8a34642cb974f922526e85d5a81bc17d1073d83c33f064ed48259c76f2792ee9b091ee9d2a1136bf510fdf70c2403dbc
SSDEEP 3072:J+wLCL131+uSoBqFOsrz5tJp2YDNBqNMVrERd0cB+usXy1Y5nudyDC:J+wLCL137kRrf9rJJwd1Y1W
TLSH
T19A247D4477E508B9FD739239C9A34606E6727C120770CADF13A04669AF3B7E0953EB62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1568	regsvr32.exe
1568	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\AppVIsvSubsystems64.dll
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1568