6d64ace30b4059e7f1cd3b813c9ddd83e2b8543bda9cbadb7831c62910437ce6

Analysis

max time kernel
1800s
max time network
1100s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 03:59

Target
net9.0-win-x64-release/PatreonDownloader.App.exe
Size 72.8MB
Sample260509-ekepzaav6t
SHA256 6d64ace30b4059e7f1cd3b813c9ddd83e2b8543bda9cbadb7831c62910437ce6
MD5 860e5d6dfcf58794e91850022f17088c
SHA1 605a564b0aaec6d93040ccefce6c6ef494a8b5fc
SHA512 757f135aeffa26d183eaeedc12af9774c4925df975bcc547cf92dad76e9592df9c3e13e570da524dda9f5c18ef163d78b74344674bd57453c2889971f9646276
SSDEEP 393216:jbzT85lJ7EzoYk/4xRtJTG9Ra6GLGK0lfyAdbU9BJKGPWY/M6fKASlwG1EEpPBdM:PKYzFggoyAqdK6h/IEEpr4lQ7R13kUqD
TLSH
T152F7BF15F3E80B16E67FC27DC6638112E6B1F4421362D6CF0454EA992F63BC1AB76362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2192	PatreonDownloader.App.exe

C:\Users\Admin\AppData\Local\Temp\net9.0-win-x64-release\PatreonDownloader.App.exe
"C:\Users\Admin\AppData\Local\Temp\net9.0-win-x64-release\PatreonDownloader.App.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2192