442e1d3bed88633facc49a9ca6760241749057f66661d9a94a2fcd348022887c

Analysis

max time kernel
142s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 09:25

Target

FarPoint.Spread.for.Windows.Forms.v1.0.9.0.Incl.Keygen-ORiON/Keygen.exe
Size

59KB
MD5

97e65ff9e4657f175da6ac8e67620f53
SHA1

03744a194c75af9d7729a224db9128da6ab29478
SHA256

1e5993266feca933f3b2ef237ea908ca535dd30765b486d992cadf1c26ff860a
SHA512

328842cdc92bdcd2af4bc91def69f04a94b91a5239c390ee533c5d95941d1b501cd7c03ac635ed5db6868fa7242149dfd9340243f43339cb8044c413dd2e19b1
SSDEEP

1536:76QQ2GZkpFr7VLkTYKmkjWN+/IFIqN/gIuXKxH:76QQRZ6rVkMBN+oH9AKH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3680	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3680	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\FarPoint.Spread.for.Windows.Forms.v1.0.9.0.Incl.Keygen-ORiON\Keygen.exe
"C:\Users\Admin\AppData\Local\Temp\FarPoint.Spread.for.Windows.Forms.v1.0.9.0.Incl.Keygen-ORiON\Keygen.exe"
1⤵
PID:3556

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x510 0x514
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3680

memory/3556-0-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-1-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-2-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-3-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-4-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-5-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-6-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-7-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-8-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-9-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-10-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-11-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-12-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-13-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-14-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/3556-15-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download