bb69ca9d9d5d49d68c38e7dea490ac9cd8338ccfcf9c3659bad253521e2508d6

Resubmissions

12-07-2023 11:14

12-07-2023 11:07

12-07-2023 10:03

max time kernel
284s
max time network
32s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
12-07-2023 11:07

Target

Device/HarddiskVolume2/ProgramData/AppCache/17/java.exe
Size

484KB
MD5

fff5b5177415555f827f8456610e9cdd
SHA1

8193dcedfa22a81e94bbc584c8d64d409ede7fc7
SHA256

0bb6c20f09fa76638a35183d4d3d842ff5b11901828ff07ab1261631f87cd52f
SHA512

25ebad10b2f542ce8646ef3da2f565c15360b4853e98edb8555e867dcf3064f9a9a451ac53a88f291ed344913673e47213ea9a55a52f6259cbfed20ff75dd0ed
SSDEEP

12288:5+Kb1E61tjNDen/kn7GwK0Yw9Zx/Y5ckfd5B1qezQ5K7v:5+Kb1E61tjNDe87lK0d9Zx/i7fd5vrz1

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	996	java.exe

C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume2\ProgramData\AppCache\17\java.exe
"C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume2\ProgramData\AppCache\17\java.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:996