8ec55d3235d02246f344c97d6dac1dbd1c3fa2f8f920a255501d26a2e338d23c

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 02:14

Target
patcher.exe
Size 56KB
Sample260820-cn7ttaba35
SHA256 8ec55d3235d02246f344c97d6dac1dbd1c3fa2f8f920a255501d26a2e338d23c
MD5 163db278863a6883c0fc66bbc662e497
SHA1 118453b41af1d58cf381fdc88fbd421d9fcf257e
SHA512 eac5b4b21b4fd62bca8e4e0905412317543977a2f45cc58c8cf9c5d0336b19d09df1fcf1bf745dbd717bee4023ee277f58d2899f0bbb3da38a621f7b1ec0bf73
SSDEEP 768:bGzUGlyA/EtlG6V2wpOOKb1rRoFMuakzx/BFqttwIDyeVJNKGjojHMLHqK:bG7KXQwpo1ROakzfFMFVJFoYDqK
TLSH
T106431B278E1A406FD36A9DB4D1574902DB72BC8647B1BACF97810CE60F156D8EB3BD02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5496	patcher.exe

C:\Users\Admin\AppData\Local\Temp\patcher.exe
"C:\Users\Admin\AppData\Local\Temp\patcher.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5496