cfb88df90bd4918074c78394949b4f5ce9e04c6f6482634e3c5b5be1d0cc67ea

Analysis

max time kernel
2s
max time network
4s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 06:40

Reason

Machine shutdown

Target
2026-10-10_a32f9035cb03fb2763b82efc7d9990a0_conti.exe
Size 128KB
Sample261011-he7eksdc74
SHA256 cfb88df90bd4918074c78394949b4f5ce9e04c6f6482634e3c5b5be1d0cc67ea
MD5 a32f9035cb03fb2763b82efc7d9990a0
SHA1 bde22c521d00619ae8de91faabf4119ffd16d64f
SHA512 a6eb17254e0add6ad1fc55d3a7839cff175d29e863ae23da4dd5b91d10a81afd45fc798b4aa6de48071e10c3a5fd1c45a5b27c930da5ebba026c477a94f8c82d
SSDEEP 1536:rpVojNt/pfW9PaizoJcNing4SjQAf2roapJLJdwJVjBa9C0P27cWgQYRTYA8wlUD:rpqjPYf06NieQRe7JgQt6s
TLSH
T1B8D318C6BAC99CE7DE06123488A78329233DEBC54BC74B134D3972351E136D0AED765A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3424	2026-10-10_a32f9035cb03fb2763b82efc7d9990a0_conti.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-10_a32f9035cb03fb2763b82efc7d9990a0_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-10_a32f9035cb03fb2763b82efc7d9990a0_conti.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3424