4b81cc187f12f508b4336e17d2525d734c491d7494bb7f509fdaeb8c279dabaa

Resubmissions

24/03/2023, 20:11

24/03/2023, 20:03

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
24/03/2023, 20:03

Target

Inzector.exe
Size

4.9MB
MD5

45fab2ab7c948382c9816d4c3c5d1505
SHA1

4690674d75dbcfd6a2439828c9c2dea62c222530
SHA256

c0cca88d4178636b4330e9e2aadd4d446b9f1734633c1aa91448fbd6562ad95c
SHA512

861d7e6c7fe21f96b9337af75ef5b8935aeb774733ed2b36c18ccfbb0e0b9a4a933e48abe68073931fa21bfe599923d3ae166c68f10a075b11052558d8832a29
SSDEEP

98304:2A5Ew+laprq1bDuvxcoWxhTWAX1+ip3+mCLfYPnYpxGVhZzehP/lHBZU:2A5ELli+1bKvxczX4ip3+m8YPYpxGVhw

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4896	992	WerFault.exe	92

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1328	Inzector.exe

C:\Users\Admin\AppData\Local\Temp\Inzector.exe
"C:\Users\Admin\AppData\Local\Temp\Inzector.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1328

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 992 -ip 992
1⤵
PID:2504

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 992 -s 704
1⤵
- Program crash
PID:4896