b9dd35f49b4e60e9c3f3d7d94a3d1748883bb5edfd7d888fce3f2e755fa52b3c

Resubmissions

30/09/2024, 02:57

30/09/2024, 02:54

30/09/2024, 02:49

30/09/2024, 02:46

max time kernel
30s
max time network
142s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
30/09/2024, 02:57

Target

Balatro.v1.0.1c.Beta/Balatro/Balatro.exe
Size

52.9MB
MD5

64caa2d5ff3dac02fd59b1fa9a650dd3
SHA1

454417e509ccb73ebdff7f3e6b00291fe098e317
SHA256

9655b8f1c113acec16ed95220dd531fe1e03165194fe8e9966fb370ffbc43d01
SHA512

79850108ec7181aec920f3423ab8abde1a7fce7d0ab45e058a8e16185e145fefe82f98a7ea00eb0862918b392c054f042610f1bd3d6eda4439df0c3378c3fac7
SSDEEP

1572864:0cbQO2JtEJJ8jCaMC6534f317kuL2CeCC8Wu/:5bQO2DqTaMR1uLGCC8Wi

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4568	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4568	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2872	Balatro.exe

C:\Users\Admin\AppData\Local\Temp\Balatro.v1.0.1c.Beta\Balatro\Balatro.exe
"C:\Users\Admin\AppData\Local\Temp\Balatro.v1.0.1c.Beta\Balatro\Balatro.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2872

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004DC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4568