Analysis
-
max time kernel
78s -
max time network
80s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27/03/2023, 15:24
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://trk.senestudio.com/ls/click?upn=o-2FO5tqfFDZ6CJu5GunkMvtKqWO9Z9X-2FZz1MIh9fqdN9OgC1ygAssgM9WPZ7lkQji0X97CPV8PizcuKbRaxJxPoX-2BQDysEgytfSLdqdwAWT6Xx4ykDrOEYQandb972JBfLol-2FX0-2BMotCMYxREzTkimCgT-2F1vlsMtMq2HNuRYSrm1SJX9XYgr1wA-2B-2FIFZA-2BkzYN7Kgk7Ss-2FsdexEXcxIGRVisFQQdyZQFmxHGEKqh7PBL5SZEaee-2BQojXZQfb5Bn1lMH3TbfaDxapsZApSPazuHJkMOace0HXi67q5jN9p52Oq5U1yURo3XQrnd7-2BlTT7B6NUoGnH-2BPzj19W8VNU9gi3V5DDSqtEl6qfIFLQmH6fS3xO5I0BCwwmmrPZj1yf-2BO6JLelcKx9-2B-2Fzv7mFoi8cKg-3D-3Dl0K9_Rf3IwX2cLkQ2VM6wsTwKAPDZ3jQyIwia4-2FdG3Zzpz-2BP4lXbHZZ1PSXmXQLJmwBmqPAbUJ3jojdfL52UUGng1eYYQZOExb-2FuSkaA5c8wd8pFOvG2kB7hNXpFYmSkUuxN4hTgU7fagJ46TK8YDVO1sph9sSKAqh1yCsfIw-2FfpSSAfkLPerTUNYf3ufXs-2FfY0G4CtkUzgf10wDQaSr3QsxkN3gwPDNIsrmUly2XHuFUuG2h1JlpJEQVZylvHduJmB-2FMqI-2BgsaDmU2azg6IWW9tjjOtiRN2GpVuxWblwdCXAWIzOTCf42f-2F2krnHNQeV4Mr6xEnapQFWaoA1Hk8Yw4d5K81-2BmNmDMbSr-2Fd5PmU8xwoTrm9XjW2EQqnYx72ytq2xPJpOHX7U1b8AS5lbvPdX0-2Bz7r-2BLzGvOon1LtdLG1AoYI-3D
Resource
win10v2004-20230220-en
General
-
Target
https://trk.senestudio.com/ls/click?upn=o-2FO5tqfFDZ6CJu5GunkMvtKqWO9Z9X-2FZz1MIh9fqdN9OgC1ygAssgM9WPZ7lkQji0X97CPV8PizcuKbRaxJxPoX-2BQDysEgytfSLdqdwAWT6Xx4ykDrOEYQandb972JBfLol-2FX0-2BMotCMYxREzTkimCgT-2F1vlsMtMq2HNuRYSrm1SJX9XYgr1wA-2B-2FIFZA-2BkzYN7Kgk7Ss-2FsdexEXcxIGRVisFQQdyZQFmxHGEKqh7PBL5SZEaee-2BQojXZQfb5Bn1lMH3TbfaDxapsZApSPazuHJkMOace0HXi67q5jN9p52Oq5U1yURo3XQrnd7-2BlTT7B6NUoGnH-2BPzj19W8VNU9gi3V5DDSqtEl6qfIFLQmH6fS3xO5I0BCwwmmrPZj1yf-2BO6JLelcKx9-2B-2Fzv7mFoi8cKg-3D-3Dl0K9_Rf3IwX2cLkQ2VM6wsTwKAPDZ3jQyIwia4-2FdG3Zzpz-2BP4lXbHZZ1PSXmXQLJmwBmqPAbUJ3jojdfL52UUGng1eYYQZOExb-2FuSkaA5c8wd8pFOvG2kB7hNXpFYmSkUuxN4hTgU7fagJ46TK8YDVO1sph9sSKAqh1yCsfIw-2FfpSSAfkLPerTUNYf3ufXs-2FfY0G4CtkUzgf10wDQaSr3QsxkN3gwPDNIsrmUly2XHuFUuG2h1JlpJEQVZylvHduJmB-2FMqI-2BgsaDmU2azg6IWW9tjjOtiRN2GpVuxWblwdCXAWIzOTCf42f-2F2krnHNQeV4Mr6xEnapQFWaoA1Hk8Yw4d5K81-2BmNmDMbSr-2Fd5PmU8xwoTrm9XjW2EQqnYx72ytq2xPJpOHX7U1b8AS5lbvPdX0-2Bz7r-2BLzGvOon1LtdLG1AoYI-3D
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133244115171175638" chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3384 chrome.exe 3384 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe Token: SeShutdownPrivilege 3384 chrome.exe Token: SeCreatePagefilePrivilege 3384 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe 3384 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3384 wrote to memory of 2808 3384 chrome.exe 85 PID 3384 wrote to memory of 2808 3384 chrome.exe 85 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 116 3384 chrome.exe 86 PID 3384 wrote to memory of 216 3384 chrome.exe 88 PID 3384 wrote to memory of 216 3384 chrome.exe 88 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89 PID 3384 wrote to memory of 5080 3384 chrome.exe 89
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://trk.senestudio.com/ls/click?upn=o-2FO5tqfFDZ6CJu5GunkMvtKqWO9Z9X-2FZz1MIh9fqdN9OgC1ygAssgM9WPZ7lkQji0X97CPV8PizcuKbRaxJxPoX-2BQDysEgytfSLdqdwAWT6Xx4ykDrOEYQandb972JBfLol-2FX0-2BMotCMYxREzTkimCgT-2F1vlsMtMq2HNuRYSrm1SJX9XYgr1wA-2B-2FIFZA-2BkzYN7Kgk7Ss-2FsdexEXcxIGRVisFQQdyZQFmxHGEKqh7PBL5SZEaee-2BQojXZQfb5Bn1lMH3TbfaDxapsZApSPazuHJkMOace0HXi67q5jN9p52Oq5U1yURo3XQrnd7-2BlTT7B6NUoGnH-2BPzj19W8VNU9gi3V5DDSqtEl6qfIFLQmH6fS3xO5I0BCwwmmrPZj1yf-2BO6JLelcKx9-2B-2Fzv7mFoi8cKg-3D-3Dl0K9_Rf3IwX2cLkQ2VM6wsTwKAPDZ3jQyIwia4-2FdG3Zzpz-2BP4lXbHZZ1PSXmXQLJmwBmqPAbUJ3jojdfL52UUGng1eYYQZOExb-2FuSkaA5c8wd8pFOvG2kB7hNXpFYmSkUuxN4hTgU7fagJ46TK8YDVO1sph9sSKAqh1yCsfIw-2FfpSSAfkLPerTUNYf3ufXs-2FfY0G4CtkUzgf10wDQaSr3QsxkN3gwPDNIsrmUly2XHuFUuG2h1JlpJEQVZylvHduJmB-2FMqI-2BgsaDmU2azg6IWW9tjjOtiRN2GpVuxWblwdCXAWIzOTCf42f-2F2krnHNQeV4Mr6xEnapQFWaoA1Hk8Yw4d5K81-2BmNmDMbSr-2Fd5PmU8xwoTrm9XjW2EQqnYx72ytq2xPJpOHX7U1b8AS5lbvPdX0-2Bz7r-2BLzGvOon1LtdLG1AoYI-3D1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3384 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff1d459758,0x7fff1d459768,0x7fff1d4597782⤵PID:2808
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1796 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:22⤵PID:116
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:82⤵PID:216
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2244 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:82⤵PID:5080
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3136 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:12⤵PID:4696
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3144 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:12⤵PID:2452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4788 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:12⤵PID:2240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=5184 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:12⤵PID:3292
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5132 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:12⤵PID:3788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4652 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:12⤵PID:2012
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5428 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:82⤵PID:4400
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6152 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:82⤵PID:1792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6268 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:82⤵PID:3900
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5840 --field-trial-handle=1860,i,339443228061992509,16715920927701810767,131072 /prefetch:82⤵PID:4792
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2288
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x404 0x3fc1⤵PID:4948
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
75KB
MD5af7ae505a9eed503f8b8e6982036873e
SHA1d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
SHA2562adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
SHA512838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892
-
Filesize
36KB
MD5619bc2b781b2ebb7cbe4da6f0525fa63
SHA10cbb2a53729ee7c4754f78d573e4b67fa9e2a391
SHA25607e22cada222cfffa1f07615e694a09c99852395a54bec403679dab69a37f4d2
SHA5124644cfffa709897ecf3d06d861e3ffa8369999460d55a01d0fd51025fe90ece9dfe5dbac65db469968422493918029b1f50df683e91f5df62080e0f7ab5f9169
-
Filesize
23KB
MD51052fa1b84863574771d37777439e016
SHA15b083aea5a675216ae8c24ccaab16180c5246b31
SHA25616a368d94f610df53a0a3fbff15a9bd9977105503b52d3364a86668fd228de95
SHA51254ab04b2c6c7d15860a0410154dd95f0439946d76633073937fd1acd7ab356c6612a7934ac1098fe37c4e90764ddecb3fb0abc2ed1d618606ab3e7765ecf9f89
-
Filesize
23KB
MD5252b827c28e38ca1f3f5d05eefa125be
SHA1b528d38e7030b94639f18e1bd5ca3eb21d5d05b7
SHA2564f7ca9e8a0018d038e1afa48881c187e89756f9117223a2980b20e0a1d9946d9
SHA512ebdd1766ab1ee65f31a016766da8931e799b36f86ea53a66564d8d7224b1cff1653d737299d40159dab92136905f82537d2ed4fc983efa0de9fab0c503dbe087
-
Filesize
89KB
MD5e2f6781201b3fa49bda9b6f441e44e58
SHA1667affef6f3c9e50d38eb9bddd805568695b985a
SHA25604e5cbacd13f7ee83d41ebd38dee31fe84a8003b9b8752495eb0d2d5107e03f2
SHA512df20af3234dcc116056a5bc558a236b9190cf4e65ce55365f260aad523a31b13dfc4564135fa03f2480dceffe2ba0b8d88d4ed5755a8dcb06290fb548ba7cfc4
-
Filesize
47KB
MD52aaa9194a91dd4eda1b2679cdb1684b6
SHA1306b57bc4f9c818972e45d6d371e01f70f280cd6
SHA25607c52be831b1f3665d1293f2b923c82eea2a6329042e663867a8cfe8128d5612
SHA512bd5f5bbff686daa0e15cc611da8c7cfa6629a88f2764c90632628f9b1dd7dba2250e78a8ed9fef8f7063c02ab0fa27be664c3ec04f67e38f79740bfd3e02070f
-
Filesize
20KB
MD536198101592939008c40185ca385d403
SHA10255d0b208d2f2727a54aa061ae39a33dc7613dc
SHA256f4c005a5ae7424a39b4ef75884d0034b66fca46f3810ce71120689ea57aef794
SHA51224d6ef9165f76eff8971d84220866a7c1b10a02be83e5b54aa987adece179c359903be644ef32ab7d8098ba620f0d8eb141a1c31df7dd589798afd3648933844
-
Filesize
115KB
MD5e5a7f83895416f44282823ca68fa62df
SHA14996457065f748d3118419f38b1b9069e9d3b5b7
SHA256fba15e730c5b50d24c47e85e1eb36e2436509b7691f9a4341c3e5860ff7a12f8
SHA512f53d08894b89b0e60761edeadf12b03d0b93197a35a3b98fc217d918481aa9a118043c288c8d647c29cc7eb6c608e2ab46bf7051e87a28e967c8c05b3c4bb754
-
Filesize
90KB
MD5c4c330d529fca9beb7d05e72b609af40
SHA103909d3223c74e4532a377218d56bdd8fce35cae
SHA2564139b0430bf217ec0cae6c358bb04632f6bbab6b306cb6163e7db9630b99606f
SHA51211e3bb353ba7f1c5631d341a9a89d2706274b7d8891c612e530f0f27365ae1f618604f28f55039a19fcdfb4a064ce1843d9e864798bfe576d32f900e7d85891f
-
Filesize
67KB
MD5c5fc059a0cc793a37c6107c6b5b23729
SHA1f8c2193c8f02007e0b77959c4c7e63f26806b23f
SHA2564197092696aea9f9e5e9d6f6f5714cce1137d9605340e2b65088f07d0e9e32e0
SHA512ddbf97de9f4e0abd7bb4f6dc8f1e518c864f52758f308333be07d9fc5b67330fb4fa461d3908e4ccbca58cceb8ee389471e4fe662e961f783a9a46a543f014cd
-
Filesize
27KB
MD57716e124e19760049484d1bcde4a8af2
SHA151d50c9e9b7fc658c1316d1844418cee0baffa2a
SHA256fa7968a9a888e1a6dc6ac6126b8edd6e73974c2b0629f669bfb74916f0e7d534
SHA5121ed454872f7b74892c20843446f914a6b0b985d6bc7579130188a07aca8c5fbf0a8759fa63ae33649b06001191e2637f55c22661a5c55a259971b409662be00a
-
Filesize
107KB
MD56dd5046cd9c9bea81cd926c57e90a9c2
SHA140470d9b9cfb37d1b97aec294f8b6b79b168b17b
SHA25645abdcd2ff5bd211fa6038636b198ea9eb4d8567aa8c257191afc60c4d8d6573
SHA51286070f079035f965ff7fcf34f08f926b05d62f196de626fe2a7d809c3c320fbc6e0c92e0ddd6aa45bada6470e9c0ba25dad4eac3585cf47f1f7b7709a7d9b83e
-
Filesize
207B
MD51ed047e478ceb8779028c2c739447b4d
SHA1889cdc0f7fb9a7c2461c9331c1f6af446d893e38
SHA2565174dcfc513d931d96ad55be4feb37d7049f4dba23fb86e87c5b3a8cf843a817
SHA5121a457b5c36fe32cc085d20f150cc47be975190ea046d7e1ed88dbdef8d172f026d87c83ea119c5a23600ba5a3cdb897dfbc670322fc4e6c5af70539065e6bcf1
-
Filesize
207B
MD54c3f80505a84a900332f1ce3c9ac3840
SHA125caa652481cc03fb6c5ff2ccde0259295b0b1be
SHA25614e8e906c2b682c709bb09211e69c7991f175281e2c3beacff4eda2bfaec01bc
SHA5125b1213b226fc1c20d7accd34a6eb793f95505c088bf4b746723bc663102342059e9bcb0d42138af3d0c1f63cbaaa5dc2a2c7a485b2df268697f19e91749f3ab7
-
Filesize
1KB
MD55af6c58e8652485de93b633120477d87
SHA1ad355e0bef8c224adaed0a45ed1cfd22a296c903
SHA2562520813ba4576d13815b3ee2e59faf28a7edc080ae21197f4cb8df98bd2a94bc
SHA51284dabd04c2df095704f0e79cd04a4da4efdb5a9e04fee8905f0f388fe48441a885bb1fa9e8b98a2c0480eae4c707c60c0a466c0c3bf07422622b1c105da584b1
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_senestudio.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
7KB
MD5dab5481bd95f1691e62336d06e2b31fa
SHA1687b2709087ca86b126a4f9e29d562ae281fc215
SHA256124c9995667870e9d926e892fc01f8a63ead010a62a4a00b3ee117db275f5ea9
SHA5124956193bc2e77f243c2030b6f5e4eb5d94b97bdfa9217307fdebd84eab2d8d4af9838244de6d799f7561a0203c51d0e114dc44d2fd3ea7175e9f7ece3dc7f961
-
Filesize
4KB
MD585fe140d11b8e614322cc6a868f7e674
SHA17a7c108844ac141358bacf3479e8c39e41aaf634
SHA256c0dc584fcc96d9ce9b9b196f1897e833461c6867e02eb56052460e3ee8e7e5f4
SHA5128f2a84f48d170cf13a368a11cffa378ac5bae9f118dd0cc1c3cb86963a54bafc729953bdef868e16ae16e360b18c673b61dce544f75435b1f7a1e3db835af478
-
Filesize
4KB
MD5ea48c8ff5266855571d5c10b570c4142
SHA19ebb6bee8d54cb38891164ced81b66d7e8ffa600
SHA2569aa03d92593b87d378020db585c7f4482d8bed02107ea52861d97268f805ca46
SHA51271e1156d34d4f3aaa20bb3035e719a2cb61fd89ac207ca6899d92d3e4f124b8b40a20ac916cdb185f202ab029ef112750999e94f5a7b2ec3aedc799749066a5e
-
Filesize
4KB
MD5cdf1c7e08eb95023b2791e72af23e9b1
SHA1c761cfa4bd8e6d9075dee0b5ed821bfee51907f9
SHA256d201c87677b340f47014f63b2946c2efd2f0049b2a7fa514eeb6a5850eaa8a44
SHA51290eee79923fb4cc9df958530970680748b34b0d63c4a6bb03d1e8de30aa0135d44a57619282fc7e2a47c579108453430dba2dd8cf0f04af91004fca92a5e0f59
-
Filesize
4KB
MD5ae6c122c1aa366f867eb10066a0c1a91
SHA13a17857e40fe4abe7e19db2dde68e7be703d2c3a
SHA256f174450ce2d79834ce1adafadfe2720f4c02e37a7d079c89d3e108fecd1a4640
SHA5122ea1a01d39492ea139b77643cd2831ba7b2048e7649e8ccc19ba1eb27cb0c7b1f0eff3fc764568e792b7042c9f6fa5474b94a5447b6091846133368c70289182
-
Filesize
4KB
MD593f616441789132c602d0703a0352ad0
SHA17b7561e423df1e9869f200fdd99947cda9b05d78
SHA256a4b5f57cdf55d55850505fbb8c9f0b719e7345193728261e896d0b8e3d668b09
SHA512f50ddf331b34d730cf2d349d39271925a044ea4f8bf5c9a503c0c9bfd732b15d5414ac8d3aa35377d6b7df19ad5f6d17962e48614b0087be1ceca30c6bf72cc6
-
Filesize
4KB
MD5e9c54d281b5aee9373a201524060d5cb
SHA1128421e4e1de12ad46b686746abe5e7bf1b83b2e
SHA256364488d84b0dc971947d8346d1e1fc6c38ea5e7ea8fca8ea0141d680bd2c9c90
SHA5129850700db3eaedf3803edca3099ae061ea6e64973c227025f38b1afc02175ead23bca258fb212d5736af48542d9c1ee732ee02c3f2e5ac7a5edff54c6147fff2
-
Filesize
6KB
MD5aade70849f1b8f0d3be98739ca50a6b4
SHA1aa73e6e3fc7bfb9b9a59ff7c2485074038c89f4d
SHA256b73df060326da3c39df96195749fbe1b15d4197134315c37385a5c528996716f
SHA512173476bf0cd0e8fe702746e401771d16e92bb7c5bc902cfcf5f84da8aa066528b47dcb5e50bc6733b8762e1e3847dee7576be3c35e3eb778763ae9852bc40bd5
-
Filesize
6KB
MD55f74c2dcdbaba87120b4779a4c5baf0a
SHA176699d757403c0c24cdfdd5031bc85a8e4c6aa5e
SHA256ee5a13691c55ed8684e6701ec10e6ce4b3947e67815186f907355370c08ddd7c
SHA5125b96a84d8803e1d6f2a69932212f3cb9328ad682688d85054121d5eaf83f41cf315edbf361e31a1da84bf737cbd864e600e24792bb84d0ffe3aa103843e77141
-
Filesize
6KB
MD5697ba892bed24696679fc3f810be1684
SHA11497d4d91bd506384c3457e629ec4a0d1c5f3567
SHA256a8b901d8286c7c92971481e2a999f396bbcfd1c229766bb8d660585dac3191f3
SHA512c9eecd9d1ca9f817cdb24f0ae50d33d197df23e4cc26b0fe95b4f61e23d840e7104954db2e3ba42f65ad033af16e39a1be75848c8064b2d6d8d93aeefb88c6bf
-
Filesize
15KB
MD5b8572be53b8533e086a3718de020c553
SHA148a2aadaf170d9cf1fe480632d8d8171f84350f0
SHA256e56122a5ede0f8e9e6c03d520a4385c210708fac83f9064b56effa511771c319
SHA512a975b2619a1f8b243f284baedb1106ca94c32b643587f0419059ce19366b5ba0290330602b80fe5f313d13a32a5a37ca7eb081b10d21ba9373fdcaa44b5b03d0
-
Filesize
15KB
MD517962276c333c35f68aeeac9f9acbe93
SHA1fd262b2ae0a831400b3b35634ed7089967984a4c
SHA256fe6779baf1dcb4a9bb55e17d8a28777573441a983760d37feadd57ee33db9861
SHA512b05e18f19dc23f722589b7a32414bee60356d257810fd08e84cb82a6eb6f0b9a7b12d6c4f287dbba156d1b75421d12b42e0247b37423c0293907f5732b0a5584
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\761ab166-bde4-4851-9a8d-ab3b712cf59a\index-dir\the-real-index
Filesize72B
MD5441a24dd1f33678ccab4cd899bbc2e45
SHA14084fe9cc9f2d115a9d801c7e0a8b3426921fc9e
SHA256f1287cab10d5d627f0ba96ddacfb94f399b65bca5ceb90c3f9efcb4359b89e14
SHA51275063b5487e96a9860cf34b5aeb1648d3cd04f0cca0782f65265e7853235b802885cfcf922dd0c66bdd8f7ffc906a684db76aba365557e80957de83690b8ecb7
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\761ab166-bde4-4851-9a8d-ab3b712cf59a\index-dir\the-real-index
Filesize72B
MD52c4442af5690e4f74be33e21cb505c64
SHA1a5d1842a74ce2a03c887e5df7b201c72a70421d4
SHA256e8c1f97edb3ca3cfc4f19e606b8cfdca4c6c6e1d93da906520c196fa0109a645
SHA5123b17606fccf1b0fc631d8301b0e65092437b3af98b506b266339c6d74d1009053322ce9f466900bac7c42bba1ae73c558441e5ecec4183984f18465f9c030c59
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\761ab166-bde4-4851-9a8d-ab3b712cf59a\index-dir\the-real-index~RFe56e68c.TMP
Filesize48B
MD5187d84a5e2e3a20ac189d1e9beea6767
SHA1f0861a28b583ce5474cd1dc064680ad891489fb9
SHA256d4245f8a618b6e8b3116d7945ed04fc267d5be4423ae47ccc418f334862f7f11
SHA51277e1194d92099708051772f5ae2a1b872fc8acb8d87b42012d1dabafe01c95f84e6bb1e2dbf25a528ef5273cc88e4c192748c2a42c3fe6444ce3bc91574d6775
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\c150175d-821c-4028-9f80-0125590795a4\index-dir\the-real-index
Filesize72B
MD58eb9aee0824d3711fd435591b737e57c
SHA15959a8b52a197077053ee5a9bc3e0cc5c2a14deb
SHA256ce8fe5431c2fbbac1f715c5ba2d6d922274e460f76a10827cb177db10bc42491
SHA512d7f9a4fd97eefc70d125e2d9325579037c998f6c3f4c7e48e55532171a76c2bbce6f5af52ca22716366593ce8229521debfbba32a80f7a149dac22658f0385f9
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\c150175d-821c-4028-9f80-0125590795a4\index-dir\the-real-index~RFe56e68c.TMP
Filesize48B
MD575d2c2336c5d1a8f9043f83257946d4f
SHA12ce0eb52824cca8183c0f8aa005b6c74369dc42e
SHA256ece769ee84ed9c79730a9413009ed7834fc279497d8a3f162c8124c455020f03
SHA5123396729ecfecbd184ca6ee51933fe97c182f7593a48cfb50ff18a61ac1da618469a31c2b7d522d16e07148172c28b607b3d7677ea2e98724da4a20b0261e9454
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\index.txt
Filesize208B
MD55c3be2a65843424950b3a59f59dfe68f
SHA14234d0e239d902400de7e62656b09e6c4d6c6455
SHA256d4ebcc76a720d5255d847d370e85411edd12fd64f5eae5bea08c224aac69d5c7
SHA5124b955dabe1c1034dfb46803cf54c04a13cfa61a083724b00ba8f4ce197c9558a0ac967dd8d5f128793312ee04c3972ed29c1af2f5b08f3f80369650fde147e57
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\index.txt
Filesize203B
MD57d5291f72770c6710e8ac577f60017be
SHA1ee999fe9c44dc5e6956fc815d8190c5bd32bfb39
SHA2566842d2fe5a35f53e8d9839dcbc775256ac2f9cff0d8ba81d65cc79932c8523fd
SHA512e7a71c462d092b80656464ab2c3db0dca5da460afdbcd588bf16f0f2744c7cb7f338be58250757e6ee7604d276d63473df17e99e4de6eafc71f35dd91a5e9512
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5cdefb084e33cf59ab2a5788f01d7c125fda4e9e\index.txt~RFe56a6b4.TMP
Filesize136B
MD5c12767e4822103020b6b99a657507d41
SHA1c86c26985d93a4b3d1d2ff2745825eccd4cf76f4
SHA256cd1ffb17072005991dcaba2a63aba6a64140e5d3be77a4a5b547490a68b45289
SHA5121d4d44b5e35a415757a8b98a71b9dfbba9fe7dc8ab04c29495cbc2cd926870c08be4764d5794a86d3ca1327adffc3108a7c6f8d035d3b75d97d71acea32be966
-
Filesize
144KB
MD5b8a58915059264571b61d4eeccecebde
SHA11001f0b81999204756224cc87e6639ae6ca2877d
SHA2564a6d0e5fff16057682351bbd41de5a9e6d1a09e50eceac2d38a4f1a46a0bcb96
SHA51258729a63f63c73d367b168124cff621ac951e2a3c6f36b5bed5d4b2fb2a744f1fa17d9e5234733a5c5b8dae640dd4109a40dbd4063e27be65f5a7535f88e944c
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd