Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
04-06-2024 12:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gamesense.exe
Resource
win11-20240508-en
windows11-21h2-x64
2 signatures
150 seconds
General
-
Target
gamesense.exe
-
Size
690KB
-
MD5
1b9eca70107203da6238a845cf17fddc
-
SHA1
2e75e1f8affd2b3681015a5d4afe0e4810bfa567
-
SHA256
2f411bec080f0d94a74c6cb095d793b00086375c98a6eba78e9f1c7dbd3d66d1
-
SHA512
a67b4e86046dd9e1ab48d7226e536e52d41ba3f5b1cf18a1f9f1990d0f0db3b9b301b7b93a3847fd3be5305dff97734c4179eb5fa0a55c0465c299c478a62ce4
-
SSDEEP
12288:/7lJcT1a7pu2JnRywZYj7lJcT1a7pu2JnRywZYH:/7lJe2Jn5ZYj7lJe2Jn5ZYH
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe 2920 gamesense.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2920 gamesense.exe