e04f75b3ed8e2fb183f4bf04c31ccde4bef7a3a17d687f72fde4124c5df5de42

Resubmissions

30/10/2026, 13:34

30/10/2026, 13:33

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 13:34

Target
GTSpecDB.Editor.exe
Size 16.3MB
Sample261030-qvch5sef97
SHA256 e04f75b3ed8e2fb183f4bf04c31ccde4bef7a3a17d687f72fde4124c5df5de42
MD5 62bb4b5ea86a4ae3b9e410acef7c34a8
SHA1 a84207fe1bd3eb64e6d13ee1b18c4ead79715e09
SHA512 0a0a00d9ae70974c8488b8aa25fdf41b7aef97fb402e527e6ad6a3b4fd9b04f364dd27a0e5e6ec7af23b9566399d30b7cda17f064d142b7587493868f7ebc2a4
SSDEEP 98304:PZLWtQOFsTxTG8kOROI9oGTG6bfC/3i3B1:PB2oTHg6bfC/3iD
TLSH
T1F50739102BF80709E7BB0B34B87572B15BB5B9576A12D31E14C8D09D3DA2BB08D617BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4424	GTSpecDB.Editor.exe

C:\Users\Admin\AppData\Local\Temp\GTSpecDB.Editor.exe
"C:\Users\Admin\AppData\Local\Temp\GTSpecDB.Editor.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4424