Analysis
-
max time kernel
149s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15-05-2024 20:53
General
-
Target
Riot Vanguard/vgtray.exe
-
Size
2.9MB
-
MD5
5e5d365cab9cb660809402a79bfa1bb9
-
SHA1
b80d9ba048683650a77c7145f103478135ec28f5
-
SHA256
6cc42a855e7dd89462f70ba9c4c4c3e1b3d1f865f143d7237c17aa2a41188ed6
-
SHA512
7e5a5ff0c7913221e8f2149a351cbf52e772507d6ecb9e3ea05b0c1efe69678068306e141af21cbcd77f04f5ffa55aa24dae0b3d9372e10ca023b07c3b9dc207
-
SSDEEP
49152:DGtlqyNIU6iNKtsCdJerb2WkqKp1RqaznksD2iUGT+3K6aXsPy5dHoVCOh5PXK3g:N+Nme32DL5n3GyAYlRXBE2qgXI
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Riot Vanguard\vgtray.exe"C:\Users\Admin\AppData\Local\Temp\Riot Vanguard\vgtray.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3452,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:81⤵