24d2f00a1a35b70aaa6ddd836e6bb52c8d68953e81ab478e58f1a85375ceaf97

Resubmissions

12/05/2024, 08:14

12/05/2024, 08:10

max time kernel
125s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 08:10

Target

idle_master_extended_v1.10.0/Languages/no/IdleMasterExtended.resources.dll
Size

8KB
MD5

b36b0dcf1a3dec93273b37508187895c
SHA1

674f43a4f40a68125b5a87d80fb2b5afbd8ebf03
SHA256

96658fe47fb46d896ae19abdf064a8ab951481547e3f3597d394571605f3456f
SHA512

8aa60745a73545a04de93c83257205c4f784aba8e73a9f1a8f8b861ed9b47b0c0e413b68c32a7ce09baa0adab26ee3d24b5e6d5819621fc9967c30ca858c3c4c
SSDEEP

192:QcayCzdLcj0wfriTQt4lV43FMYMrUx/g8DQ+PW9qVOAWSiNI/eHi:QGaAj0wf0Qtw984+O9qQUV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2080 wrote to memory of 2732	2080	rundll32.exe	89
PID 2080 wrote to memory of 2732	2080	rundll32.exe	89
PID 2080 wrote to memory of 2732	2080	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\Languages\no\IdleMasterExtended.resources.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2080
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.10.0\Languages\no\IdleMasterExtended.resources.dll,#1
  2⤵
  PID:2732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4444,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:8
1⤵
PID:4376