b876abd380a10b1be1fab42ea2c6458ba3eda2ada91447c3d8afeba4945b0405

Login
Reports

Overview

overview

Static

static

Files/Goog...er.exe

windows11-21h2-x64

Files/goog...64.msi

windows11-21h2-x64

Invoke-App...it.exe

windows11-21h2-x64

Invoke-App...it.ps1

windows11-21h2-x64

PSAppDeplo...s.psm1

windows11-21h2-x64

PSAppDeplo...ns.ps1

windows11-21h2-x64

PSAppDeplo...in.ps1

windows11-21h2-x64

PSAppDeplo...on.exe

windows11-21h2-x64

PSAppDeplo...it.exe

windows11-21h2-x64

PSAppDeplo...it.ps1

windows11-21h2-x64

PSAppDeplo...s.psm1

windows11-21h2-x64

PSAppDeplo...it.ps1

windows11-21h2-x64

PSAppDeplo...on.dll

windows11-21h2-x64

PSAppDeplo...er.exe

windows11-21h2-x64

PSAppDeplo...nt.exe

windows11-21h2-x64

PSAppDeplo...er.dll

windows11-21h2-x64

PSAppDeplo...ce.dll

windows11-21h2-x64

PSAppDeplo...DT.dll

windows11-21h2-x64

PSAppDeplo...rs.dll

windows11-21h2-x64

PSAppDeplo...ol.dll

windows11-21h2-x64

PSAppDeplo...ry.dll

windows11-21h2-x64

PSAppDeplo...rs.dll

windows11-21h2-x64

PSAppDeplo...fe.dll

windows11-21h2-x64

PSAppDeplo...ol.dll

windows11-21h2-x64

PSAppDeplo...ws.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

PSAppDeplo...es.dll

windows11-21h2-x64

Resubmissions

20/07/2026, 12:01

260720-n68plshs9n7

20/07/2026, 11:57

260720-n4n77ahs2k8

20/07/2026, 11:23

260720-nhb1qsgs5r7

Analysis

max time kernel
898s
max time network
425s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/07/2026, 11:57

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Files/Google Chrome Manager.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Files/googlechromestandaloneenterprise64.msi

Resource

win11-20260513-en

windows11-21h2-x64

24 signatures

900 seconds

Behavioral task

behavioral3

Sample

Invoke-AppDeployToolkit.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

900 seconds

execution

Behavioral task

behavioral4

Sample

Invoke-AppDeployToolkit.ps1

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

execution

Behavioral task

behavioral5

Sample

PSAppDeployToolkit.Extensions/PSAppDeployToolkit.Extensions.psm1

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral6

Sample

PSAppDeployToolkit/Frontend/v3/AppDeployToolkit/AppDeployToolkitExtensions.ps1

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

execution

Behavioral task

behavioral7

Sample

PSAppDeployToolkit/Frontend/v3/AppDeployToolkit/AppDeployToolkitMain.ps1

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

execution

Behavioral task

behavioral8

Sample

PSAppDeployToolkit/Frontend/v3/Deploy-Application.exe

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

Behavioral task

behavioral9

Sample

PSAppDeployToolkit/Frontend/v4/Invoke-AppDeployToolkit.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

900 seconds

execution

Behavioral task

behavioral10

Sample

PSAppDeployToolkit/Frontend/v4/Invoke-AppDeployToolkit.ps1

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

execution

Behavioral task

behavioral11

Sample

PSAppDeployToolkit/Frontend/v4/PSAppDeployToolkit.Extensions/PSAppDeployToolkit.Extensions.psm1

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral12

Sample

PSAppDeployToolkit/PSAppDeployToolkit.ps1

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

execution

Behavioral task

behavioral13

Sample

PSAppDeployToolkit/lib/Newtonsoft.Json.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

PSAppDeployToolkit/lib/PSADT.ClientServer.Client.Launcher.exe

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral15

Sample

PSAppDeployToolkit/lib/PSADT.ClientServer.Client.exe

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

Behavioral task

behavioral16

Sample

PSAppDeployToolkit/lib/PSADT.ClientServer.Server.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral17

Sample

PSAppDeployToolkit/lib/PSADT.UserInterface.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

PSAppDeployToolkit/lib/PSADT.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

PSAppDeployToolkit/lib/System.Buffers.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

PSAppDeployToolkit/lib/System.IO.FileSystem.AccessControl.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

PSAppDeployToolkit/lib/System.Memory.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

PSAppDeployToolkit/lib/System.Numerics.Vectors.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

PSAppDeployToolkit/lib/System.Runtime.CompilerServices.Unsafe.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

PSAppDeployToolkit/lib/System.Security.AccessControl.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

PSAppDeployToolkit/lib/System.Security.Principal.Windows.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

PSAppDeployToolkit/lib/af-ZA/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral27

Sample

PSAppDeployToolkit/lib/am-ET/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

PSAppDeployToolkit/lib/ar-SA/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

PSAppDeployToolkit/lib/as-IN/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

PSAppDeployToolkit/lib/az-Latn-AZ/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

PSAppDeployToolkit/lib/be-BY/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

PSAppDeployToolkit/lib/bg-BG/iNKORE.UI.WPF.Modern.Controls.resources.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target
PSAppDeployToolkit/Frontend/v3/Deploy-Application.exe
Size 211KB
Sample260720-n4n77ahs2k
SHA256 b876abd380a10b1be1fab42ea2c6458ba3eda2ada91447c3d8afeba4945b0405
MD5 ef4fa3d90d56d9457e1fae0f938bf873
SHA1 5a8a48078c1b9af9c103fca377b17f3f0233f98d
SHA512 ef1c6c68378eea6a22ee595f667c8f408e5c463658e44d1a920e8d4184c9d15b6675fc8dad5def3168183a133840a144e3a2c5b9a840d8a1fbf30cfdd707d343
SSDEEP 3072:1cbRD8+t3Bzet+EwdHqOYHf3HKNMuAgVcBslHGhlvSz+NPKV2XGq/3J0cMMYG:1cbFzcOdKOqauuAq91fVmGq/HSG
TLSH
T13124124283D00732DEE719753DBA92D9CF72F94766714BA8349D856C2B27E100BD23AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
4188	Deploy-Application.exe
4188	Deploy-Application.exe
4188	Deploy-Application.exe
4188	Deploy-Application.exe
4188	Deploy-Application.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4188	Deploy-Application.exe

Processes

C:\Users\Admin\AppData\Local\Temp\PSAppDeployToolkit\Frontend\v3\Deploy-Application.exe
"C:\Users\Admin\AppData\Local\Temp\PSAppDeployToolkit\Frontend\v3\Deploy-Application.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4188-0-0x0000016070450000-0x0000016070488000-memory.dmp

Download