8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce

Analysis

max time kernel
125s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09-07-2024 01:43

Target

8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce.exe
Size

7KB
MD5

19c16c8666917e24e9f5a9b3786d26b6
SHA1

59c26cd4749bcf5927b2335cd56e49ab9548598f
SHA256

8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce
SHA512

3599fc4d1675b6d5e43a2fb8462d0ac59f49ed8c1e9cc81bd58a84f89767595c1ade5e2a008adab8c1bdc74f5db0f561fd68896262d129fe92b384fed01b0276
SSDEEP

96:WEoMQhJKs7EnCxs3VGNX3KHFCi4eiZWG+dJvw43R/YMwfYlwrzNt:WNTQIgh23KHWb+dJvdmMwf+wt

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2272	8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce.exe

C:\Users\Admin\AppData\Local\Temp\8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce.exe
"C:\Users\Admin\AppData\Local\Temp\8083bf83f2cdde7e8f93fcf5adb526b06d3a1849d15e17c97621ec75a7ab8fce.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4272,i,6959856223548986108,4217696995639198458,262144 --variations-seed-version --mojo-platform-channel-handle=1300 /prefetch:8
1⤵
PID:3164

memory/2272-0-0x00007FFF38D73000-0x00007FFF38D75000-memory.dmp

Filesize
8KB

Download
memory/2272-1-0x000001F1D4290000-0x000001F1D4296000-memory.dmp

Filesize
24KB

Download
memory/2272-2-0x00007FFF38D70000-0x00007FFF39831000-memory.dmp

Filesize
10.8MB

Download
memory/2272-3-0x00007FFF38D70000-0x00007FFF39831000-memory.dmp

Filesize
10.8MB

Download