e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6

Analysis

max time kernel
151s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 21:33

Target

e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6.exe
Size

443KB
MD5

cf6ba3de43d229ab0e8cf58ab56aa9c0
SHA1

83adca1bf6cf05997e62965da8c9276913ff0a10
SHA256

e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6
SHA512

e87c0d605ee98c702c4a6b665de325762ae6622a842ae9b8f59cb051d512e77c99fd4ed2190eaf44b0561c4641feda63c015fa612556804b9175a8100f0d529d
SSDEEP

6144:UxrRUpgl/oWw6y6hKgB/nHGYvifcsiMunWF8S7axYI/flP2gEio9FAYlv:UlRUpgxI6yvntuWF8j/9PBno9j

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2844	e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6.exe
Token: SeIncBasePriorityPrivilege	2844	e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6.exe

C:\Users\Admin\AppData\Local\Temp\e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6.exe
"C:\Users\Admin\AppData\Local\Temp\e913305ad49b109d2858b9c73d5f175f1245383f44b84db0381d50d967160be6.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2844