Overview
overview
8Static
static
3Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
MicrosoftS...nt.exe
windows11-21h2-x64
1MicrosoftS...pp.exe
windows11-21h2-x64
1Runtime/x8...er.exe
windows11-21h2-x64
8Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
1Microsoft....e.appx
windows11-21h2-x64
1Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
3Microsoft....e.appx
windows11-21h2-x64
3Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
Microsoft....e.appx
windows11-21h2-x64
1Microsoft....e.appx
windows11-21h2-x64
1Analysis
-
max time kernel
149s -
max time network
162s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
23-07-2024 15:28
Behavioral task
behavioral1
Sample
Microsoft.6365217CE6EB4_102.2406.5001.0_x64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
Microsoft.6365217CE6EB4_102.2406.5001.0_x86__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
MicrosoftSecurityApp/xpdAgent.exe
Resource
win11-20240709-en
Behavioral task
behavioral4
Sample
MicrosoftSecurityBackgroundApp.exe
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
Runtime/x86/MicrosoftEdgeWebView2RuntimeInstaller.exe
Resource
win11-20240709-en
Behavioral task
behavioral6
Sample
Microsoft.6365217CE6EB4_102.2406.5002.0_x64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral7
Sample
Microsoft.6365217CE6EB4_102.2406.5002.0_x86__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral8
Sample
Microsoft.NET.Native.Framework.2.2_2.2.29512.0_arm64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral9
Sample
Microsoft.NET.Native.Framework.2.2_2.2.29512.0_arm__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral10
Sample
Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral11
Sample
Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x86__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral12
Sample
Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_arm64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral13
Sample
Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_arm__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral14
Sample
Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral15
Sample
Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x86__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral16
Sample
Microsoft.VCLibs.140.00_14.0.33519.0_arm64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral17
Sample
Microsoft.VCLibs.140.00_14.0.33519.0_arm__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral18
Sample
Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
Behavioral task
behavioral19
Sample
Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe.appx
Resource
win11-20240709-en
General
-
Target
MicrosoftSecurityApp/xpdAgent.exe
-
Size
855KB
-
MD5
54fec1cb73d5e17d02e69b098e7ef425
-
SHA1
e22a425af66461d941d690638291f0aa64f17fec
-
SHA256
70bfe6fe4adcfbae72be0190f72f3d2d1a2f3afbc57ef64d0ffd5bf9b98acfb9
-
SHA512
2be12478c764869a661972523cfbe1bcec55186f625c8697724d918ca5928e0d697d8143f44a686aeeca649fd895acae87248ea8b23994a9dbfe93c27968ab47
-
SSDEEP
12288:D0u3nYUtqCmbK0SCkn8Q+qPFU1k8QRiAfXnP:fY9K0SCkbtfiAP
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5088 xpdAgent.exe