cc53ec3595ecda55b688e158228cd30d904bc5234c9c479391f675317c70ad28

Analysis

max time kernel
300s
max time network
305s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:56

Target
Install League of Legends sg2.exe
Size 72.3MB
Sample260910-p6mb2sha78
SHA256 cc53ec3595ecda55b688e158228cd30d904bc5234c9c479391f675317c70ad28
MD5 fc7d32026c14ee3e3d0c9e8362c8d133
SHA1 3252f5bf130cee3a3ba083f78b73f962ebe21208
SHA512 d9b3d17793f9c97196a9084199747c5310fddc7ebc9e97eaef45bb1d316973d19c4909c530d1fe46460559d50e51fb1c1d04a1af582af80af91bb16f9bcbc528
SSDEEP 1572864:pebSw5Sp8d0UNl/Ywrt9E7lzPFUKBBJDIVIbjSp1xeN:kWp8dnAthBBJDIVRjA
TLSH
T131F71217B96800E9C4BBD1789E5B992BEBB03856133097DB26E0DD651F13AF46E3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5116 wrote to memory of 904	5116	Install League of Legends sg2.exe	89

C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe
"C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5116
- C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe
  "C:\Users\Admin\AppData\Local\Temp\Install League of Legends sg2.exe" --agent --riotclient-app-port=49764 --riotclient-auth-token=GoWmOQauoiM8QoDGEhjl5Q --app-root=C:/Users/Admin/AppData/Local/Temp "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install League of Legends sg2/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install League of Legends sg2/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install League of Legends sg2" --session-id=9de7a98b-7d56-a341-93fc-f51f2dd21f25
  2⤵
  PID:904

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3264

machine.cfg

Path C:\ProgramData\Riot Games\machine.cfg
Size 39B
SHA256 5cc257fb0e8d31cb52d063510710bbbf6fcf1fcb9010429d89761386404caed9
MD5 3d6e0d1fb9b6a89d173a0de460211ddc
SHA1 d8e4952d43500f03db068feccbf174fad1df2dd6
SHA512 9f7d5239c2e63e23ff0ab132a84e891be0a42562bcc7ac12fe5f0fcd1e5e3ff931c972aaf3553f787dca9ac0e18184429a66ce58ba5e8c599997a14521d404d6
MD5 SHA1 SHA512

Submit Download