Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
03/06/2026, 08:40
General
- Target ReShade_Setup_6.0.1.exe
- Size 3.5MB
- Sample260603-kkxtfacw6j
- SHA256 293b4e2a879ec1c2eeb8f7c948f49d7e4cc5c3c0a0637d476bd9097f7e91b52e
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ReShade_Setup_6.0.1.exe"C:\Users\Admin\AppData\Local\Temp\ReShade_Setup_6.0.1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2596-0-0x000001C18EFE0000-0x000001C18F01C000-memory.dmp
memory/2596-1-0x000001C1AB220000-0x000001C1AB230000-memory.dmp
memory/2596-2-0x000001C190DA0000-0x000001C190DA8000-memory.dmp
memory/2596-3-0x000001C1AB370000-0x000001C1AB3A8000-memory.dmp
memory/2596-4-0x000001C190DB0000-0x000001C190DBE000-memory.dmp
memory/2596-5-0x000001C1AB220000-0x000001C1AB230000-memory.dmp
memory/2596-6-0x000001C1AB220000-0x000001C1AB230000-memory.dmp
memory/2596-7-0x000001C1AB220000-0x000001C1AB230000-memory.dmp
memory/2596-8-0x000001C1AB220000-0x000001C1AB230000-memory.dmp
memory/2596-9-0x000001C1AB220000-0x000001C1AB230000-memory.dmp
memory/2596-10-0x000001C1AB220000-0x000001C1AB230000-memory.dmp