wtf community v1.0.0

Adobe Genuine Monitor Service

A little LSASS, as a treat

📋 Live Preview
Adobe Genuine Monitor Service
Adobe Genuine Monitor Service

Sandbox: execFile · Timeout: 30s

Capabilities

credential.dump.lsass

Documentation

examples:

  • description: "Execute Adobe Genuine Monitor Service and observe the unusual behavior" command: "Adobe Genuine Monitor Service"

Adobe Genuine Monitor Service

A little LSASS, as a treat.

Adobe Genuine Monitor Service (AGMService.exe) opens and reads from the LSASS process. While this access is legitimate, it can create false positives for process access alerts.

Contributed by g1ng3rr00t

References