9692e9e2bf22a45f14b9979ec13e95194b922418418a610ff085b5bfc824964a

Analysis

user interaction
yes
max time kernel
50s
max time network
33s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
25/09/2026, 13:22

Target
chrome-executor (1).exe
Size 417KB
Sample260925-ql7b6aszhy
SHA256 9692e9e2bf22a45f14b9979ec13e95194b922418418a610ff085b5bfc824964a
MD5 499d3d60772ffcedfc787d32c5b57b80
SHA1 eb69622ef40081112498781a3802a574f95c6579
SHA512 1db122e3eade62a5059ab7c1877be7b70f03c5b00890baed9fc02aef81b77a9a86a49cf24706039355162fa6eacaa8f2a3f0ada3e49c22c4055fecbbdfce7522
SSDEEP 12288:4iNhGl0A5Uh3ecExnmmR0BT62g/d9MTvbBOR:4iNc513mmRWOn/yB
TLSH
T16B94DF97739130E9F072823988865651E732BC792B20ABDF47A477562F336D09F3E620
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4728	chrome-executor (1).exe
Token: SeCreatePagefilePrivilege	4728	chrome-executor (1).exe

C:\Users\Admin\AppData\Local\Temp\chrome-executor (1).exe
"C:\Users\Admin\AppData\Local\Temp\chrome-executor (1).exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4728