c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/06/2024, 14:59

Target

c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe
Size

199KB
MD5

a78927d63f2b838a9fd6da5f0fe7ce60
SHA1

27c7e3a94895d5ebbcbaaf66fe5fb096bb463ac1
SHA256

c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737
SHA512

8335ed991edf7ca3e17bca27de1c305d9fa6e1df64e343d8fbc157d304dab3ded73c5079d7d9b9b50608dbf666b92e5bcaf2e4ef2fbc720d07f3c4f3a218351c
SSDEEP

6144:5Rb+D4Jxkk6vBs/TpW1X4kxuqimeLqoCb:5lgkUBs/TpeX4pqiFqoq

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2260	c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe

C:\Users\Admin\AppData\Local\Temp\c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe
"C:\Users\Admin\AppData\Local\Temp\c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4472 --field-trial-handle=2280,i,1836084024518340990,18250262151825427757,262144 --variations-seed-version /prefetch:8
1⤵
PID:5520