15d68ce61b896729bb9aa29f337369d2b063caa122b44765ee9bb4b0e62e2b2e

Analysis

max time kernel
164s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14/03/2024, 14:02

Target

c8cbad64ecdfa1331a3323388477f381.exe
Size

289KB
MD5

c8cbad64ecdfa1331a3323388477f381
SHA1

81282342bf88ff567474b46d1b4a5333520cebbd
SHA256

15d68ce61b896729bb9aa29f337369d2b063caa122b44765ee9bb4b0e62e2b2e
SHA512

7e5cea4753bd374840c5c3c6b4d81f072af392bd207b4788307d6474487c1aa99cdbbcab80ac58b74c7e8f8f264a16ffcf62e75e3fcef44dc23f285a1c63d65b
SSDEEP

6144:AUi0aRHUY1vjapGWCNp/G2H+tv0TBZvlKuJqw:ri0aRHUAjapGWCNp/G2H+tv0TPsuJL

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2072	c8cbad64ecdfa1331a3323388477f381.exe

C:\Users\Admin\AppData\Local\Temp\c8cbad64ecdfa1331a3323388477f381.exe
"C:\Users\Admin\AppData\Local\Temp\c8cbad64ecdfa1331a3323388477f381.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1728 --field-trial-handle=2272,i,1589057049575649654,2929151440327217574,262144 --variations-seed-version /prefetch:8
1⤵
PID:3380