cc53ec3595ecda55b688e158228cd30d904bc5234c9c479391f675317c70ad28

Analysis

user interaction
yes
max time kernel
139s
max time network
85s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:56

Target
Install League of Legends sg2.exe
Size 72.3MB
Sample260910-p6mb2sha78
SHA256 cc53ec3595ecda55b688e158228cd30d904bc5234c9c479391f675317c70ad28
MD5 fc7d32026c14ee3e3d0c9e8362c8d133
SHA1 3252f5bf130cee3a3ba083f78b73f962ebe21208
SHA512 d9b3d17793f9c97196a9084199747c5310fddc7ebc9e97eaef45bb1d316973d19c4909c530d1fe46460559d50e51fb1c1d04a1af582af80af91bb16f9bcbc528
SSDEEP 1572864:pebSw5Sp8d0UNl/Ywrt9E7lzPFUKBBJDIVIbjSp1xeN:kWp8dnAthBBJDIVRjA
TLSH
T131F71217B96800E9C4BBD1789E5B992BEBB03856133097DB26E0DD651F13AF46E3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1944 wrote to memory of 4084	1944	Install League of Legends sg2.exe	85

C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe
"C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1944
- C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe
  "C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe" --agent --riotclient-app-port=49850 --riotclient-auth-token=tEsSY0Ed1n-sLcAOElm_Pg --app-root=C:/Users/Admin/AppData/Local/Temp "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install League of Legends sg2/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install League of Legends sg2/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install League of Legends sg2" --session-id=2b0784d1-0b65-cd4a-9e5c-1460cd836fb2
  2⤵
  PID:4084

machine.cfg

Path C:\ProgramData\Riot Games\machine.cfg
Size 39B
SHA256 0b8d09f91e0255a740f99aa75cbd6be04bd421ee7202405245428917288ea280
MD5 53800e7f97283b37335639ca1393ce37
SHA1 b58ee439db72440a9820280c0ac7a49084b70a5b
SHA512 badf2fc38bbe56f447a715ceb13ad5383673c7459ba7f08fac3c29073f587ffdf213efec8593691ef1920ebaed45e092f6614b2f1515149cf21a597be3a1315c
MD5 SHA1 SHA512

Submit Download