de34fd6d4d1237de8052ebeb3b090420af2fac89857178fb6a9d344e6cbb1ca6

Analysis

max time kernel
60s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 23:52

Target
loadertodll.exe
Size 138KB
Sample260817-3w27eaec84
SHA256 de34fd6d4d1237de8052ebeb3b090420af2fac89857178fb6a9d344e6cbb1ca6
MD5 e44ff4801871dc7dc6a105744c47eedc
SHA1 dc5c093cef076ae56e0997150c395768e46ebb52
SHA512 0799b5f2c62294af96e50fcd9c131c93a2dc028f00f9c86eb73195d8d201f59cf9fe07d1dad50c161a9225180b520baa9bdb065442df695d67333f6352e90f5d
SSDEEP 3072:7DmkbWBLB2WKkBRbZtOvMDPwl6ulS6TJ6e317Go:7Dmkb4LgYOMDPwwsSiDdG
TLSH
T185D3292BB755117DE1A6C6BECEC68D41FB3278490792A7DF07901AB24E165D0BF3A203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2528	loadertodll.exe
Token: SeSystemProfilePrivilege	2528	loadertodll.exe

C:\Users\Admin\AppData\Local\Temp\loadertodll.exe
"C:\Users\Admin\AppData\Local\Temp\loadertodll.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2528