1303791d5361f853607ab0e98fc6f102c7ac3585358d680a05f20c7f365c302c

Resubmissions

11-05-2024 16:53

11-05-2024 16:51

max time kernel
141s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 16:51

Target

Skiioh's Performance Pack v2 (FREE)/(4) Power Savings SkiiohTweaks.bat
Size

11KB
MD5

4bbecd404b9f6cc35c743e7de42a155c
SHA1

57a1f44092aae249320e48c219902ede6e48d2a6
SHA256

d0cffbe46ed51f076a541a6fe9ad8aeb45164399be650df28669b3cc9c5c8bdf
SHA512

43b3d86e7245f755ed2ffbbec8f1371b19235736fd80b2d36e2c760c953b58860a6360aef03626f356f0533b21a1b76035b896e67b9705cace7c95c7c63ddb2f
SSDEEP

192:xbHz0aMnIFtNFMUHM3UH8UHM2UH/iX9Ft30FtkFtMFtsFto3FG0H1d0H1G0HBk0k:9TQgLBPw+p3cMEkEUv1wG85Dg8

Score

1^/10

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 568 wrote to memory of 368	568	cmd.exe	91
PID 568 wrote to memory of 368	568	cmd.exe	91
PID 368 wrote to memory of 4132	368	cmd.exe	92
PID 368 wrote to memory of 4132	368	cmd.exe	92
PID 568 wrote to memory of 1892	568	cmd.exe	93
PID 568 wrote to memory of 1892	568	cmd.exe	93
PID 568 wrote to memory of 4976	568	cmd.exe	94
PID 568 wrote to memory of 4976	568	cmd.exe	94

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(4) Power Savings SkiiohTweaks.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:568
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c chcp
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:368
- - C:\Windows\system32\chcp.com
    chcp
    3⤵
    PID:4132
- C:\Windows\system32\chcp.com
  chcp 708
  2⤵
  PID:1892
- C:\Windows\system32\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(4) Power Savings SkiiohTweaks.bat" "
  2⤵
  PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1328 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
1⤵
PID:3872