3ac921b88e687c9f62702af590a55b2216c24b7026a32f045d68ef0ad11adecb

Analysis

max time kernel
133s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
16/03/2023, 21:41

Target

Hotline Miami 3D Text Generator v2.exe
Size

5.9MB
MD5

7c017eb90fde9db2dcc728bf952281f4
SHA1

409435d515277ffeb164d70d6f1e314cd102517f
SHA256

b21e12727d35cb713d18ef78d7562275a59bc55adfebe8f15745d0081c0b5ca4
SHA512

de7aa88b7a29387c08c67e7d759aad77f12dd1b25dc617fc8c46e2b9bfb76537c33bb36614999b2c7ee65bc6be103bcfc9f4210356832f60da8d946d2a0636cb
SSDEEP

49152:l2XRgESS97T3w8aXiQaVLj5ao6BlyI2d+VRKpVOBCG2d458AfTEcWmg0NaSDl3BB:UasFrcX9Rrj8aPdg0EGUZkrMp4Vj5

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1980	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1980	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1584	Hotline Miami 3D Text Generator v2.exe
1584	Hotline Miami 3D Text Generator v2.exe

C:\Users\Admin\AppData\Local\Temp\Hotline Miami 3D Text Generator v2.exe
"C:\Users\Admin\AppData\Local\Temp\Hotline Miami 3D Text Generator v2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1584

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x514 0x4e4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1980