1bf84dbf594cf0311ff6dbd827f5bf2c8998d1ed943c49801d742b30224f56f5

Analysis

max time kernel
50s
max time network
33s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
12/07/2023, 05:25 UTC

Target

God-Of-War-II-The-End-Begins-[JAP]-(Torrent).torrent
Size

72KB
MD5

82e1cbe1e3a98d3ebaddd732325f9322
SHA1

bbc7b63012ba5cf1a2f21aa63744ef75b22fad85
SHA256

1bf84dbf594cf0311ff6dbd827f5bf2c8998d1ed943c49801d742b30224f56f5
SHA512

16c58a5f595916057e2c079832488a4bb755480ff0e0690865e1300abbc00e6e9dc844340d6469ed43e68ab99ab7fb66f7e198204f298871f2921a0b46ea6d27
SSDEEP

1536:a5n1nBP3DEne7TdMDfdDHmnTG2SxSHIFEG2uC9VBxuIslCDNc/DoJ:sQne75MG6zxSH7ZucBoIsIDy/DoJ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	1252	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1252	AUDIODG.EXE
Token: 33	1252	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1252	AUDIODG.EXE

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\God-Of-War-II-The-End-Begins-[JAP]-(Torrent).torrent
1⤵
PID:2312

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x538
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1252