5e1042421ba29d16c34d686c701cb77cee14ff6c08984c7fa2a9860eea480259

Analysis

max time kernel
148s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 06:13

Target
AppVIsvSubsystems64.dll
Size 224KB
Sample260808-gy5jnavvhw
SHA256 5e1042421ba29d16c34d686c701cb77cee14ff6c08984c7fa2a9860eea480259
MD5 ed82975e464d69cd57ded15c354b1024
SHA1 843fbfb5349e578878a08b68e9cb4b759d26b3e8
SHA512 9cfd3958dca128def08acd4c77916f6d8a34642cb974f922526e85d5a81bc17d1073d83c33f064ed48259c76f2792ee9b091ee9d2a1136bf510fdf70c2403dbc
SSDEEP 3072:J+wLCL131+uSoBqFOsrz5tJp2YDNBqNMVrERd0cB+usXy1Y5nudyDC:J+wLCL137kRrf9rJJwd1Y1W
TLSH
T19A247D4477E508B9FD739239C9A34606E6727C120770CADF13A04669AF3B7E0953EB62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3212	regsvr32.exe
3212	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\AppVIsvSubsystems64.dll
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3212

wdfontcache.log

Path C:\Users\Admin\AppData\Local\Temp\wdfontcache.log
Size 831B
SHA256 5ead49084b14c537961eb98ffe61c5d5edb54865d67b00c1b7cbeba7fccf1ce1
MD5 dcdbea1c6ba52261584e6c8a2ac35d5e
SHA1 6be4e0507e0b4dc28a50b7bd985fd63c5bb8a746
SHA512 74404c7639035396fbacf415110633c8c330aec4bb3fefa5cb1882c0ef7102fdee2b4385569c767b7a8519ff0b7aac811b8e2fabc9ae15d7193c6f6925742a86
TLSH
T19C0184D674AEEC760A2B490DED246D808401F62281B40C36F2534B3874EBB739F0AEC6
MD5 SHA1 SHA512 TLSH

Submit Download