aebd97d42727a28b16c12e8f27fbf6fbe2d4291d44a389c0089d556d3557d55c

Resubmissions

31/05/2026, 16:05

31/05/2026, 16:05

31/05/2026, 16:04

31/05/2026, 15:59

31/05/2026, 15:59

31/05/2026, 15:57

max time kernel
2s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
31/05/2026, 16:04

Reason

Machine shutdown

Target
CPUfailed.exe
Size 102KB
Sample260531-thy36ab17t
SHA256 aebd97d42727a28b16c12e8f27fbf6fbe2d4291d44a389c0089d556d3557d55c
MD5 2414c8d1462f91a2f3bf8bfa5d4a6ea9
SHA1 c6884c98bef4fbb9a199621626f3646239bda5a3
SHA512 1bdaacaf6207413086703a80dd4b40be76b73b71fb3f7d1822094cc0043ecc297ccbe5909e2687686627fd3c7a81adbf6c67ea03e69a49f42faf353aa14ba4eb
SSDEEP 3072:iDp7R29MuKovdySDn8V/DzRtezfe1w5z:AiMiFDn8R/eAaz
TLSH
T1B8A3495B73E530F8E1B68678C4510A59A772BC711B609BEF07E4025A1F2B2D18D3EF62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2984	CPUfailed.exe

C:\Users\Admin\AppData\Local\Temp\CPUfailed.exe
"C:\Users\Admin\AppData\Local\Temp\CPUfailed.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2984