1303791d5361f853607ab0e98fc6f102c7ac3585358d680a05f20c7f365c302c

Resubmissions

11-05-2024 16:53

11-05-2024 16:51

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11-05-2024 16:51

Target

Skiioh's Performance Pack v2 (FREE)/(4) Power Savings SkiiohTweaks.bat
Size

11KB
MD5

4bbecd404b9f6cc35c743e7de42a155c
SHA1

57a1f44092aae249320e48c219902ede6e48d2a6
SHA256

d0cffbe46ed51f076a541a6fe9ad8aeb45164399be650df28669b3cc9c5c8bdf
SHA512

43b3d86e7245f755ed2ffbbec8f1371b19235736fd80b2d36e2c760c953b58860a6360aef03626f356f0533b21a1b76035b896e67b9705cace7c95c7c63ddb2f
SSDEEP

192:xbHz0aMnIFtNFMUHM3UH8UHM2UH/iX9Ft30FtkFtMFtsFto3FG0H1d0H1G0HBk0k:9TQgLBPw+p3cMEkEUv1wG85Dg8

Score

1^/10

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2720	2020	cmd.exe	29
PID 2020 wrote to memory of 2720	2020	cmd.exe	29
PID 2020 wrote to memory of 2720	2020	cmd.exe	29
PID 2720 wrote to memory of 1384	2720	cmd.exe	30
PID 2720 wrote to memory of 1384	2720	cmd.exe	30
PID 2720 wrote to memory of 1384	2720	cmd.exe	30
PID 2020 wrote to memory of 2312	2020	cmd.exe	31
PID 2020 wrote to memory of 2312	2020	cmd.exe	31
PID 2020 wrote to memory of 2312	2020	cmd.exe	31
PID 2020 wrote to memory of 2580	2020	cmd.exe	32
PID 2020 wrote to memory of 2580	2020	cmd.exe	32
PID 2020 wrote to memory of 2580	2020	cmd.exe	32

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(4) Power Savings SkiiohTweaks.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c chcp
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2720
- - C:\Windows\system32\chcp.com
    chcp
    3⤵
    PID:1384
- C:\Windows\system32\chcp.com
  chcp 708
  2⤵
  PID:2312
- C:\Windows\system32\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(4) Power Savings SkiiohTweaks.bat" "
  2⤵
  PID:2580