Overview
overview
7Static
static
1plugins/Be...11.jar
windows7-x64
1plugins/Be...11.jar
windows10-2004-x64
7plugins/CM....0.jar
windows7-x64
1plugins/CM....0.jar
windows10-2004-x64
7plugins/Ch....7.jar
windows7-x64
1plugins/Ch....7.jar
windows10-2004-x64
7plugins/Cl...36.jar
windows7-x64
1plugins/Cl...36.jar
windows10-2004-x64
7plugins/Clearlag.jar
windows7-x64
1plugins/Clearlag.jar
windows10-2004-x64
7plugins/De....5.jar
windows7-x64
1plugins/De....5.jar
windows10-2004-x64
7plugins/De...se.jar
windows7-x64
1plugins/De...se.jar
windows10-2004-x64
7plugins/Ec....4.jar
windows7-x64
1plugins/Ec....4.jar
windows10-2004-x64
7plugins/Es...77.jar
windows7-x64
1plugins/Es...77.jar
windows10-2004-x64
7plugins/Es...77.jar
windows7-x64
1plugins/Es...77.jar
windows10-2004-x64
7plugins/Es...77.jar
windows7-x64
1plugins/Es...77.jar
windows10-2004-x64
7plugins/Ex....0.jar
windows7-x64
1plugins/Ex....0.jar
windows10-2004-x64
7plugins/Fa...ng.ps1
windows7-x64
1plugins/Fa...ng.ps1
windows10-2004-x64
1plugins/Fa...06.jar
windows7-x64
1plugins/Fa...06.jar
windows10-2004-x64
7plugins/Fr....9.jar
windows7-x64
1plugins/Fr....9.jar
windows10-2004-x64
7plugins/GS....3.jar
windows7-x64
1plugins/GS....3.jar
windows10-2004-x64
7Analysis
-
max time kernel
62s -
max time network
176s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
26/11/2023, 01:01
Static task
static1
Behavioral task
behavioral1
Sample
plugins/BetterRTP-3.6.11.jar
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral2
Sample
plugins/BetterRTP-3.6.11.jar
Resource
win10v2004-20231025-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
plugins/CMILib1.4.3.0.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral4
Sample
plugins/CMILib1.4.3.0.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
plugins/ChatManager_3.7.7.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral6
Sample
plugins/ChatManager_3.7.7.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
plugins/ClearLagTimer Build 36.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral8
Sample
plugins/ClearLagTimer Build 36.jar
Resource
win10v2004-20231025-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
plugins/Clearlag.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral10
Sample
plugins/Clearlag.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
plugins/DecentHolograms-2.8.5.jar
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral12
Sample
plugins/DecentHolograms-2.8.5.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
plugins/DeluxeMenus-1.13.7-Release.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral14
Sample
plugins/DeluxeMenus-1.13.7-Release.jar
Resource
win10v2004-20231020-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
plugins/EconomyShopGUI-6.1.4.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral16
Sample
plugins/EconomyShopGUI-6.1.4.jar
Resource
win10v2004-20231025-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
plugins/EssentialsX-2.21.0-dev+21-c68b277.jar
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral18
Sample
plugins/EssentialsX-2.21.0-dev+21-c68b277.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
plugins/EssentialsXChat-2.21.0-dev+21-c68b277.jar
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral20
Sample
plugins/EssentialsXChat-2.21.0-dev+21-c68b277.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
plugins/EssentialsXSpawn-2.21.0-dev+21-c68b277.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral22
Sample
plugins/EssentialsXSpawn-2.21.0-dev+21-c68b277.jar
Resource
win10v2004-20231025-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
plugins/ExcellentCrates-5.0.0.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral24
Sample
plugins/ExcellentCrates-5.0.0.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
plugins/Factions/lang.ps1
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral26
Sample
plugins/Factions/lang.ps1
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
plugins/FastAsyncWorldEdit-Bukkit-2.8.3-SNAPSHOT-606.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral28
Sample
plugins/FastAsyncWorldEdit-Bukkit-2.8.3-SNAPSHOT-606.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
plugins/FreeCoinFlip-1.9.jar
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral30
Sample
plugins/FreeCoinFlip-1.9.jar
Resource
win10v2004-20231023-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
plugins/GSit-1.5.3.jar
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral32
Sample
plugins/GSit-1.5.3.jar
Resource
win10v2004-20231020-en
windows10-2004-x64
General
-
Target
plugins/EssentialsXSpawn-2.21.0-dev+21-c68b277.jar
-
Size
17KB
-
MD5
54b5d2f321eac5cee28757e2f1cc1599
-
SHA1
9df6eb5d87983d2e2c55d93ea763ba84f1340da2
-
SHA256
4551b654a1eb454bfa8782183aae0666ee63c76346f66169088f0462e315acba
-
SHA512
e9a49a837733834af2e7aa0a8353d17d55b7c6ca50358c00a555e056c720404dcea2a8b65365bbb8ac80b724b1438109b91da1b85fcc1664dc119c2be65335fa
-
SSDEEP
384:qBvq+z12ETryPcAlrcv1fmzY1Gqm6EOaiqinA0:qI+z1lyP8N1dxgfcA0
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2212 chrome.exe 2212 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe Token: SeShutdownPrivilege 2212 chrome.exe -
Suspicious use of FindShellTrayWindow 50 IoCs
pid Process 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe -
Suspicious use of SendNotifyMessage 48 IoCs
pid Process 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe 2212 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2212 wrote to memory of 2760 2212 chrome.exe 30 PID 2212 wrote to memory of 2760 2212 chrome.exe 30 PID 2212 wrote to memory of 2760 2212 chrome.exe 30 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1364 2212 chrome.exe 32 PID 2212 wrote to memory of 1168 2212 chrome.exe 33 PID 2212 wrote to memory of 1168 2212 chrome.exe 33 PID 2212 wrote to memory of 1168 2212 chrome.exe 33 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34 PID 2212 wrote to memory of 2788 2212 chrome.exe 34
Processes
-
C:\Windows\system32\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\plugins\EssentialsXSpawn-2.21.0-dev+21-c68b277.jar1⤵PID:2440
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2212 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5919758,0x7fef5919768,0x7fef59197782⤵PID:2760
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1184 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:22⤵PID:1364
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1548 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:82⤵PID:1168
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1684 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:82⤵PID:2788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2336 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:12⤵PID:1680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2340 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:12⤵PID:108
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1408 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:22⤵PID:2300
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1504 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:12⤵PID:2016
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3404 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:82⤵PID:2488
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3556 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:82⤵PID:1700
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3716 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:82⤵PID:2292
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3556 --field-trial-handle=1308,i,4829024405373719393,9167343701485079958,131072 /prefetch:12⤵PID:2128
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:1716
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5fb5672d33ad6cd10ede73af719c08347
SHA178e374358404796da0d9c559fbe908b37f7cc1ba
SHA25641b689c8365a52898926811794d64601ac1b12e0cd8e52882b0c843062b39737
SHA512933be351d77b62001fcb4b265b253fe0759bf237681cb9a13d77e52ebe5bb69c8643ea1f46542643187799ce476d151eedd470c303434c02fdff1465af771018
-
Filesize
4KB
MD50d72c2333f06ae4d2d7837cfcc30e7d2
SHA174796ccfcfd7f9040531a02ee90e834da0d45ce4
SHA256b73e4836553ed0a73b3f47c0c03594447e67b94e616a2e7dc77fe9e8a9af306c
SHA5124cef1f56c1b8eb481b953eff7a50823792c87980de163a1a8b3838182e84c1613bf5a986397be53bfe4e3407f7b1125c2dd3e7ae989702b0674d8eeaad5d1934
-
Filesize
4KB
MD5976a5f5eaa058aae47ebdf656536f005
SHA1b85c5f157e71d312841e8379e2e07a489b81dfb8
SHA256222223f9bdb56631c814fdf3856e068f9f53b55e4720c9ad041cceedf6c7b30c
SHA512458a14298ee32ed0fc0946065865fbe9b1fca389323723cbeec75903d4ca4ea1db6e7114a8a91df0cf53d1a51c227607ba4e0ea58a7527cb366cbd45cbf1629c
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58