7c46038c39d5e574738069256bc30cf86675bcabea0905b97f92b8be1bffa58d

Analysis

max time kernel
156s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
02/02/2023, 01:12

Target

Five Nights in Anime 3D 1.1.0.exe
Size

4.9MB
MD5

81ee01e9a8886047d24ec7a9d8f10c98
SHA1

f8c9ba35354b07e450c753da9c96e1085eec8f8a
SHA256

412d8b9f828d94d98f7e7c430ff599cc0f608441138b85cbad8c6089ee73f649
SHA512

7b5c750e41e9a218113771dd1b1286c459f751feed541287375e6324fab990e231b01d28dfefb6509b1ebe52682b3d88aaac25e7a6c89f22b2a21748392d86d1
SSDEEP

49152:Bpz0PdyGpaCTaL0nhYAjKxA15Ib2WU1HOpNadAhWwluUBdYpTMqTPGQVjeJ1Z:Bl0PTHq04xI5kXWwlusdATM4GQVjgZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2924	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2924	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2552	Five Nights in Anime 3D 1.1.0.exe
2552	Five Nights in Anime 3D 1.1.0.exe

C:\Users\Admin\AppData\Local\Temp\Five Nights in Anime 3D 1.1.0.exe
"C:\Users\Admin\AppData\Local\Temp\Five Nights in Anime 3D 1.1.0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2552

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x510 0x500
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2924