Analysis
- max time kernel
151s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/09/2026, 19:43
General
- Target HwidPlus (Cracked).exe
- Size 97.3MB
- Sample260916-yfcvcsdc86
- SHA256 a3ace2ed9e70890b0b02fbbbfdb70d65f681aee3c7fcba0355e2de3f4d940147
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HwidPlus (Cracked).exe"C:\Users\Admin\AppData\Local\Temp\HwidPlus (Cracked).exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4348-0-0x00007FF81275F000-0x00007FF812760000-memory.dmp
memory/4348-1-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp
memory/4348-2-0x00000000001D0000-0x0000000006326000-memory.dmp
memory/4348-4-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp
memory/4348-6-0x00000000270D0000-0x000000002D224000-memory.dmp
memory/4348-13-0x0000000021CB0000-0x0000000021E26000-memory.dmp
memory/4348-14-0x0000000008660000-0x0000000008692000-memory.dmp
memory/4348-15-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp
memory/4348-16-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp
memory/4348-17-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp