69246c4eab88fbb7d3481f7d7f743c73a88202deffc7128656d0271a959a7409

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 03:37

Target
快速启动管理器(CLaunch)4.22.x64汉化绿色便携版/ClAdmin.exe
Size 132KB
Sample260804-d6vsmsvvgy
SHA256 69246c4eab88fbb7d3481f7d7f743c73a88202deffc7128656d0271a959a7409
MD5 ae18cbbf711086557838351dfb8a2768
SHA1 3b4299d131bc57d4aaf295d27a46258ceef13646
SHA512 622565e5db1a314384ec99f183bb0b8ceb0315797ed95b5f6c1d4fbaa82e59e03a43d3466b7031480a6930d612500d92f367fac3dfdf634acfdda2363f720e46
SSDEEP 3072:V7DmmpJsoLuhzdRuscQQn4AHW/Tps7UBPTk3vNl1:9hrs4uZusdICQ2c31
TLSH
T1B9D34953B2A530E9F17E823584514A4AE7B2BC354B509BAF4374A79E5F333C08E39B61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	4448	ClAdmin.exe
Token: 33	4448	ClAdmin.exe
Token: SeIncBasePriorityPrivilege	4448	ClAdmin.exe
Token: SeDebugPrivilege	1540	CLaunch.exe

Suspicious use of FindShellTrayWindow 3 IoCs

Suspicious use of SendNotifyMessage 3 IoCs

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1540	CLaunch.exe
1540	CLaunch.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 1540	4448	ClAdmin.exe	86