b31a263ca323b147804980ea20d1b0838414b08bcfdc28f8f934a9322634d40e

Analysis

max time kernel
136s
max time network
143s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
02/04/2023, 21:40

Target

NVidiaProfileInspectorDmW-v3.5.0.0-Windows.zip
Size

334KB
MD5

2357438ffb6393c425f214342538a2b2
SHA1

cf303ccde4214fc1366590cb300a93a58a253c05
SHA256

b31a263ca323b147804980ea20d1b0838414b08bcfdc28f8f934a9322634d40e
SHA512

4e6a004be54ffd25d773a735c132ab7e59d0e1d3e4d8e9fabf5a1b679ba056943bfe3c16ee002ffb4bf16cdbccf132fa687b1717caa7bd3d13e3fa244e88361e
SSDEEP

6144:aw1hAQoqPng4qrOQAAds64euDkWnMhT59cVRQE6b3r3Q:aw1Qsg4qaQAAIeu87A

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	1868	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1868	AUDIODG.EXE
Token: 33	1868	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1868	AUDIODG.EXE

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\NVidiaProfileInspectorDmW-v3.5.0.0-Windows.zip
1⤵
PID:2044

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x584
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1868