2ee8b8dca8e141c7f73e08098ad4dc1fc1bc424540625eaade42a67bf0aeee0e

Analysis

max time kernel
300s
max time network
299s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 21:12

Target
MeasureSleep.exe
Size 139KB
Sample260602-z2cbdsfv2k
SHA256 2ee8b8dca8e141c7f73e08098ad4dc1fc1bc424540625eaade42a67bf0aeee0e
MD5 b1c43400a20cbadd82912ef3d8a54be2
SHA1 9286f5bd0bda65af8856de6198f28f2e90626761
SHA512 387a7f785eaa6e75b5f25002f50af033dd5b2c5f7c200e82d8f3c6e4cc4cb63d25efd23a148651e16363cdf8a2ef8d1412d4f1b0bdea3fadc7afd5f5ae08f9b7
SSDEEP 3072:A1Vg23bFY8pVALTGdkYxlAVSyMGObCxQEFhW:3LPVUkQ
TLSH
T1B9D33B6B361801FCD1A7E27CCA865A42F736784603529BCF03D186762F572E1EE7A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	2788	MeasureSleep.exe

C:\Users\Admin\AppData\Local\Temp\MeasureSleep.exe
"C:\Users\Admin\AppData\Local\Temp\MeasureSleep.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2788