45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04/10/2022, 22:21

Target

45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165.exe
Size

1.0MB
MD5

2f363610e2390504e72ea63da193d1c5
SHA1

8552d30305e3342c4bfb821eab314448c6f3069f
SHA256

45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165
SHA512

3e8189873de55a9ed9dda5391731b6f8479a1d2feb276ace9918278631360c3775c6d83b3ccb1f04a7209e09f7ea1cb939faf45de24b627c08e1e31d59430a58
SSDEEP

12288:QHDQGzytjywhOGG8VFPSyDEwr/tT1UorTc5Sf6bBuvVixC9x92ds5qoT1f4sC:Qqy7yS8Ek/tTtTcY6dkVJ9x92dLq4s

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	2032	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2032	AUDIODG.EXE
Token: 33	2032	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2032	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165.exe
"C:\Users\Admin\AppData\Local\Temp\45cf1128d496c09ded37bad7b957f25d6a1ad26cc65c3f8c3c7d6a373107b165.exe"
1⤵
PID:1672

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x550
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2032