24d2f00a1a35b70aaa6ddd836e6bb52c8d68953e81ab478e58f1a85375ceaf97

Resubmissions

12/05/2024, 08:14

12/05/2024, 08:10

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 08:10

Target

idle_master_extended_v1.10.0/Languages/hr/IdleMasterExtended.resources.dll
Size

9KB
MD5

6f83efdae1a226516bf99e62e1205cd2
SHA1

d68b0d3bf3c7193f1c572451899b1a4ffc43ea17
SHA256

c5bf8619482e33e2eae04e9b3a4b5ae7dc685d2b160143f82c849224862e0901
SHA512

9a74d90928d8ee45f8099fc5b58ae1948462da5dbb6e9a099e593144606fd823abb4545a2070b5c7efa7f08cec4cbd07d0071b24af224e8822475f93722e5f11
SSDEEP

192:Wk6uKTxba+T4Ur6UEO/hsWtu48SDi0/l9pNCBiO3+eHi:WVdG+T4UtEOZZu4NO0d9phV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2964 wrote to memory of 784	2964	rundll32.exe	90
PID 2964 wrote to memory of 784	2964	rundll32.exe	90
PID 2964 wrote to memory of 784	2964	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\Languages\hr\IdleMasterExtended.resources.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2964
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\Languages\hr\IdleMasterExtended.resources.dll,#1
  2⤵
  PID:784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3808 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:8
1⤵
PID:1452