570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 04:39

Target
570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe
Size 1.9MB
Sample260804-e95bxsfq51
SHA256 570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52
MD5 3d8f4f2cbe50a55cef500e8499742eb8
SHA1 dc303acace6a2f8147aa84fd0da2dd467a44520a
SHA512 405b644013ab0d46c4cafce313c2cf5884843357baaab83043cd935f8556c30231db8cf6be84d9c36ab3071606f62d241834e516fa1308f5ad9b3625e3df7b3d
SSDEEP 49152:T6NVEVgdfTQEc0p2aRABcfchEWknMmiHmjsU:2PM0QpaTp1iGj5
TLSH
T163959F53F3E280E6D45BC471CA95563BFBB0B44A80389B9757E4CE513F22B62E62D312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeBackupPrivilege	5704	570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe
Token: SeRestorePrivilege	5704	570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe
Token: 33	5704	570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe
Token: SeIncBasePriorityPrivilege	5704	570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe

C:\Users\Admin\AppData\Local\Temp\570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe
"C:\Users\Admin\AppData\Local\Temp\570208a7ab072f8064b946954ba297f9bde74549b2aeccc9b2ea7b465532cc52.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5704