1fb90f7a229259ffb18797ac4e6948a7688874c1196f78cb672feb140430a9a6

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 04:31

Target
Khalil steam fix.exe
Size 20.7MB
Sample260905-e5va6awhlb
SHA256 1fb90f7a229259ffb18797ac4e6948a7688874c1196f78cb672feb140430a9a6
MD5 6b41049b7a9e4971ea3b1057856c054c
SHA1 ca73d1096bab4bfc32e08ee3be1fa5328bfef252
SHA512 7dccde7ef178e4e4ea57764684110919f5cc0a79fd02b730d919f597ec02523c987383cd2edfdf35de92b4ed5ffcfe6e3df535f31f6f20ef52f620966f8943b4
SSDEEP 393216:BXNU7lYANU7lYANU7lYANU7lYANU7lYANU7lYANU7lYANU7lYANU7lYANU7lYANo:/UBY8UBY8UBY8UBY8UBY8UBY8UBY8UBA
TLSH
T19527E12E13ED0D35D3B7837E8EA0B7225A7538561341BB9B4F469B2D086A2C0CEF5257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4424	Khalil steam fix.exe

C:\Users\Admin\AppData\Local\Temp\Khalil steam fix.exe
"C:\Users\Admin\AppData\Local\Temp\Khalil steam fix.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4424