40a90ddd4f4491ee74b28bdea5524fc01a484ab827954f2d2f1cb25461610573

Analysis

max time kernel
125s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 17:47

Target

Super Hexagon/Super Hexagon/glut32.dll
Size

232KB
MD5

ae1f4dacacb463450dde420c0758666d
SHA1

9b14ae8de96cf7c211152a5d6db8584cd7c3d22f
SHA256

722b8d2c4912ab640fc766424fe1bffd45a0e735293ac2d763eb4031684bb468
SHA512

925c28706b42a04c8ffd0b1c58c692d7aab2b719ec5f8938763d275dca5b9a50a1071f0fb6be067e4ad0f3ae3dd7d44ff2b54e03c23312fd6b5bdcebc0185bba
SSDEEP

3072:w7wWdCMC/DmbptJT8yQCekJZyJQL7xctpP+RXgol33MpV:tW4rQuyQUNctp8xaV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	Process	procid_target
PID 464 wrote to memory of 1820	464	rundll32.exe	91
PID 464 wrote to memory of 1820	464	rundll32.exe	91
PID 464 wrote to memory of 1820	464	rundll32.exe	91

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\glut32.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\glut32.dll",#1
  2⤵
  PID:1820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=996,i,1809100026287847100,9768898026582633513,262144 --variations-seed-version --mojo-platform-channel-handle=1276 /prefetch:8
1⤵
PID:1776