091609705a031d5832f21548291c2670f06eadd781d465d3e1a5fad3772adc91

Analysis

max time kernel
599s
max time network
461s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 16:49

Target
$RESOURCES/AACGUARD/AACGUARD/PresentationNative_cor3.dll
Size 1.2MB
Sample261018-vbpftassbx
SHA256 091609705a031d5832f21548291c2670f06eadd781d465d3e1a5fad3772adc91
MD5 76c57f8f951306b6fe29c83f9844cb6f
SHA1 9aa8c8bf7af042ac0d95f6169d71a5ddd6a0cc4c
SHA512 019050f80430ae459e6fd6ffce5cbff4af49073834169d40083f6a9b22abebac1d605ab8b409449d4313a3bea08bebfc62c9b93905bcc327e8b20016414133c1
SSDEEP 24576:XjOnXauaPQDzcpsVOE4PU5tbg5ChWmAjHSa+YrHAvlFk8TQh6p1zwPwYffvhXYj5:ZuaofcpsQ5PU5ZhWmAjHjAvlF5QhURwA
TLSH
T10A453A22D2E642E5C47FC1B8C646972BFBB1740A131C66DB47608B592F27FE0963E364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$RESOURCES\AACGUARD\AACGUARD\PresentationNative_cor3.dll,#1
1⤵
PID:2552

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5688

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1784