56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 12:27

Target
56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Size 1.6MB
Sample261102-pm6xcatvez
SHA256 56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf
MD5 c6eb713fdc0cb268869fbb722a9fee0a
SHA1 89237227aeac52698b8e9e1c0597f5acbec99a46
SHA512 6c2bd4f677e723cf3bdf3dede48672b7ab3fd83fe3c225bad79cc97350aabda0831610e6cdbb8f951e2ae68b2a81c663270be2b78b15529ebfce4c887522d2c1
SSDEEP 49152:XMhSJt2/P0qKG3KJCi2wn3Ecc6/BSt9FI:88Jt2P07Kwn3LnyM
TLSH
T17B75BF56F3AA80E9D06FC5B1CB52963BFB703849C034976757A0CE662F33761E629312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeBackupPrivilege	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: SeRestorePrivilege	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: 33	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: SeIncBasePriorityPrivilege	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: 33	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: SeIncBasePriorityPrivilege	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: 33	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
Token: SeIncBasePriorityPrivilege	4484	56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe

C:\Users\Admin\AppData\Local\Temp\56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe
"C:\Users\Admin\AppData\Local\Temp\56349411cf37252748a0ca362db7fc7abe46f30528cf6b9fe0aeacdc59dc46bf.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4484