e7dd3449cb2fd81c06e0f5c19e20b280c80fc4533356f3bf67fdfcb6ce238056

Resubmissions

30-05-2023 03:52

max time kernel
113s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
30-05-2023 03:52

Target

SpyHunter-5.13-6-5285-Installer.exe
Size

6.6MB
MD5

3ce9158024e74733de9ab2232fb73dcb
SHA1

5fc8ed33206ab5b93f736114ba99bf47f81bfef6
SHA256

e7dd3449cb2fd81c06e0f5c19e20b280c80fc4533356f3bf67fdfcb6ce238056
SHA512

ac2e9d45a992513d8f4efee73f5a7166071b837302fc91888122d6a211b0437de75776d509b308809751b7c9fad69ebca5f8c6835d66b6fcb467f4cd434f06bb
SSDEEP

98304:qzCgxMDk3jEO+F7qxBO7j/11ajr5pJ+9PbES9qCJV03oJT2wIZx3oIODbhHMxvTk:qHMOjEO++CqFpJ+9PbxXV0YJzD9HMxvY

Score

1^/10

Suspicious use of AdjustPrivilegeToken 5 IoCs

Processes:

SpyHunter-5.13-6-5285-Installer.exe

description	pid	process
Token: SeShutdownPrivilege	4608	SpyHunter-5.13-6-5285-Installer.exe
Token: SeBackupPrivilege	4608	SpyHunter-5.13-6-5285-Installer.exe
Token: SeRestorePrivilege	4608	SpyHunter-5.13-6-5285-Installer.exe
Token: SeDebugPrivilege	4608	SpyHunter-5.13-6-5285-Installer.exe
Token: SeTakeOwnershipPrivilege	4608	SpyHunter-5.13-6-5285-Installer.exe

C:\Users\Admin\AppData\Local\Temp\SpyHunter-5.13-6-5285-Installer.exe
"C:\Users\Admin\AppData\Local\Temp\SpyHunter-5.13-6-5285-Installer.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4608