696431978daadd33a28841320659835ba8db8080a535b8f35e9e60701ab8b491

Resubmissions

29/06/2023, 14:46

29/06/2023, 14:43

max time kernel
143s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
29/06/2023, 14:43

Target

cmdline-tools/bin/lint.bat
Size

2KB
MD5

5976e9007acd24b391b8f74d604c928b
SHA1

826fea8f25bd31ba02cbb0a8dfd1a0791e577d04
SHA256

1ed541dff732ab5afc03902044c5e986f848686ba329168e5a8f143ce0741ec0
SHA512

3aaf8e2a3ff965bbf8680633fd9a4564460b673c0d095433ae108b9be0c525103d8ebf6eb0f1aa3f228f56cd63f04b95899cc511b3772356076068dd71f21a20

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 212 wrote to memory of 4424	212	cmd.exe	84
PID 212 wrote to memory of 4424	212	cmd.exe	84
PID 212 wrote to memory of 4592	212	cmd.exe	88
PID 212 wrote to memory of 4592	212	cmd.exe	88

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\cmdline-tools\bin\lint.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:212
- C:\ProgramData\Oracle\Java\javapath\java.exe
  java.exe -version
  2⤵
  PID:4424
- C:\ProgramData\Oracle\Java\javapath\java.exe
  "java.exe" -Xmx1024m -Dcom.android.tools.lint.bindir=C:\Users\Admin\AppData\Local\Temp\cmdline-tools\bin\\.. -classpath "C:\Users\Admin\AppData\Local\Temp\cmdline-tools\bin\..\lib\lint-classpath.jar" com.android.tools.lint.Main
  2⤵
  PID:4592

C:\Users\Admin\.oracle_jre_usage\90737d32e3aba4b.timestamp

Filesize
50B

MD5
0e2dae1e816fb6f567107e6576e6782b

SHA1
9c9e4b0953fbfa36415c9bcb857c86d8ef805907

SHA256
4f1991d013876bfcef261ab55d17de1b7547046e1d03a5923df5c9b3060552bd

SHA512
3e9339940fe3a1dd8cf35154cc5e526aba9491b4ea4f8d5328c836afe2057bac9a80a3048e47c9400e564ca548e4711821b22c946e5062e3896ee71a9b5efdfd

Download Submit
memory/4424-144-0x00000000023A0000-0x00000000023A1000-memory.dmp

Filesize
4KB

Download
memory/4592-156-0x00000000017B0000-0x00000000017B1000-memory.dmp

Filesize
4KB

Download
memory/4592-158-0x00000000017B0000-0x00000000017B1000-memory.dmp

Filesize
4KB

Download