1303791d5361f853607ab0e98fc6f102c7ac3585358d680a05f20c7f365c302c

Resubmissions

11-05-2024 16:53

11-05-2024 16:51

max time kernel
93s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 16:51

Target

Skiioh's Performance Pack v2 (FREE)/(5) Cache Cleaner SkiiohTweaks.bat
Size

4KB
MD5

85d5de5befac59eadc881ea230312605
SHA1

de0c215233323917d6ec6521be56a1acc7437aef
SHA256

8ebfee7dbf72cf4f13b1862597990e570c144bcc3208261956a6770dcefbb350
SHA512

d7434480d282140a2c57c5deeb07f44b25c56f5eb4eef82df7c048cb46f62610d1fd2e6b458416de2fadc2e98943de9578082f54b9adfb6ce20a2223f01b869a
SSDEEP

48:j1HDTLTDfLT7Ptgst2ycwAigRojvc/5/E/o/m/a/q/x/7FKHvHHHHHPHlcHxHsH3:h3Pf3THz0RrHvHHHHHPHlcHxHsHkE

Score

1^/10

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 4340 wrote to memory of 1132	4340	cmd.exe	81
PID 4340 wrote to memory of 1132	4340	cmd.exe	81
PID 1132 wrote to memory of 1304	1132	cmd.exe	82
PID 1132 wrote to memory of 1304	1132	cmd.exe	82
PID 4340 wrote to memory of 4804	4340	cmd.exe	83
PID 4340 wrote to memory of 4804	4340	cmd.exe	83
PID 4340 wrote to memory of 1420	4340	cmd.exe	84
PID 4340 wrote to memory of 1420	4340	cmd.exe	84

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(5) Cache Cleaner SkiiohTweaks.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4340
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c chcp
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1132
- - C:\Windows\system32\chcp.com
    chcp
    3⤵
    PID:1304
- C:\Windows\system32\chcp.com
  chcp 708
  2⤵
  PID:4804
- C:\Windows\system32\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(5) Cache Cleaner SkiiohTweaks.bat" "
  2⤵
  PID:1420