2ea132306a724cd5980e635c3b4a372cf066bb1b11ed70056950a4cf058fdf79

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 06:15

Target
PathsParser.exe
Size 2.6MB
Sample260705-gz5aaaes8m
SHA256 2ea132306a724cd5980e635c3b4a372cf066bb1b11ed70056950a4cf058fdf79
MD5 6b094ebdbec2be724c5451596dc48da9
SHA1 d0ce097b13f247a15396e58ebacb3a857ec6bfa8
SHA512 d3ab0115df278ff17ea95c7cec923e581b7023533b203448fce194a6ce87bda9b9e8de91031faf965501f978d9b8d730a0a08eec88bdd9329413780942857602
SSDEEP 49152:3OjPWvLTKuk2bYIU6i/X+QJWHMCr/BOCBTn4PapOh5PSsMpiPlZTfax:Jn+/OQQs2kCJlpiZC
TLSH
T1C7C57C1292DC2DEAD53A8378855F4207F2B1B05513B06BEB05AC4A650F93BD4EF3E786
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5984	PathsParser.exe

C:\Users\Admin\AppData\Local\Temp\PathsParser.exe
"C:\Users\Admin\AppData\Local\Temp\PathsParser.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5984