347aea0556212e2564709ef3c8677f75cc0ab24f83d03cfa1a98680d29a437cd

Analysis

max time kernel
30s
max time network
29s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 02:12

Target
temp.exe
Size 342KB
Sample260724-cnczfaeb56
SHA256 347aea0556212e2564709ef3c8677f75cc0ab24f83d03cfa1a98680d29a437cd
MD5 93dc52d67761a6be9b5d03fe1384b5da
SHA1 82032be8f005e936d0358e5d4f823ef0d1c1df35
SHA512 675facbd6b70d29effdbf0ffe946642e66fb8c126ce359bd64be08796a0c938f6c3741d3a04e2d56515769d39d688a7e077fe0ea3ace7bb45f9d5742bed6a5bb
SSDEEP 6144:i6C/VHDE0iDvGehPabUZjUJ8wTwn1sGbRzOZ3SsxhU7wib5VYpxM7ZLeSZB1jVZz:4/VHDHgGEapdlKlUEAm
TLSH
T1EF746D15A79604ECE377D478C9678926FAB77C414721D9EF07A0086A2F26EF0B736312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	800	temp.exe

C:\Users\Admin\AppData\Local\Temp\temp.exe
"C:\Users\Admin\AppData\Local\Temp\temp.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:800