Overview
overview
3Static
static
1CuteVirusC...DME.md
windows10-1703-x64
3CuteVirusC...r.html
windows10-1703-x64
1CuteVirusC...evil.c
windows10-1703-x64
3CuteVirusC...last.c
windows10-1703-x64
3CuteVirusC...unch.c
windows10-1703-x64
3CuteVirusC...er.bat
windows10-1703-x64
1CuteVirusC...tes.md
windows10-1703-x64
3CuteVirusC...reen.c
windows10-1703-x64
3CuteVirusC...er.bat
windows10-1703-x64
1CuteVirusC...omb.sh
windows10-1703-x64
3CuteVirusC...h.html
windows10-1703-x64
1CuteVirusC...l.java
windows10-1703-x64
3CuteVirusC...er.vbs
windows10-1703-x64
1CuteVirusC...ayer.c
windows10-1703-x64
3CuteVirusC...e.html
windows10-1703-x64
1CuteVirusC...42.zip
windows10-1703-x64
1Analysis
-
max time kernel
600s -
max time network
586s -
platform
windows10-1703_x64 -
resource
win10-20231129-en -
resource tags
arch:x64arch:x86image:win10-20231129-enlocale:en-usos:windows10-1703-x64system -
submitted
12-12-2023 21:39
Static task
static1
Behavioral task
behavioral1
Sample
CuteVirusCollection-master/README.md
Resource
win10-20231129-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral2
Sample
CuteVirusCollection-master/browser_breaker.html
Resource
win10-20231129-en
windows10-1703-x64
8 signatures
600 seconds
Behavioral task
behavioral3
Sample
CuteVirusCollection-master/chaos_devil.c
Resource
win10-20231129-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral4
Sample
CuteVirusCollection-master/cmd_blast.c
Resource
win10-20231023-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral5
Sample
CuteVirusCollection-master/consecutive_normal_punch.c
Resource
win10-20231025-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral6
Sample
CuteVirusCollection-master/cpu_eater.bat
Resource
win10-20231020-en
windows10-1703-x64
1 signatures
600 seconds
Behavioral task
behavioral7
Sample
CuteVirusCollection-master/cute_quotes.md
Resource
win10-20231020-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral8
Sample
CuteVirusCollection-master/dark_screen.c
Resource
win10-20231020-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral9
Sample
CuteVirusCollection-master/folder_flooder.bat
Resource
win10-20231023-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral10
Sample
CuteVirusCollection-master/fork_bomb.sh
Resource
win10-20231020-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral11
Sample
CuteVirusCollection-master/memory_crash.html
Resource
win10-20231129-en
windows10-1703-x64
8 signatures
600 seconds
Behavioral task
behavioral12
Sample
CuteVirusCollection-master/out_of_control.java
Resource
win10-20231129-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral13
Sample
CuteVirusCollection-master/prank_master.vbs
Resource
win10-20231129-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral14
Sample
CuteVirusCollection-master/ram_slayer.c
Resource
win10-20231129-en
windows10-1703-x64
3 signatures
600 seconds
Behavioral task
behavioral15
Sample
CuteVirusCollection-master/unclosable.html
Resource
win10-20231129-en
windows10-1703-x64
8 signatures
600 seconds
Behavioral task
behavioral16
Sample
CuteVirusCollection-master/zip_bomb_42.zip
Resource
win10-20231023-en
windows10-1703-x64
0 signatures
600 seconds
General
-
Target
CuteVirusCollection-master/browser_breaker.html
-
Size
360B
-
MD5
cc3bafa14cc69c5574e3c7ede17b38a7
-
SHA1
907d9c7b73c9e0fd6b4816896dd96396fdb98461
-
SHA256
9fd16c7e177d94d95744d633be5cd48044dd8abac82550bc3ce1eb5ffb5d5321
-
SHA512
b463c5e13a2d55928c3836be36f445153ea4267571b81c21cfc257c09c27f9ee13a33c249ed25ca9846076a177ac3fdfb8e64aecdb1b2f336f9e9a3448e4db99
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133468907926333573" chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 292 chrome.exe 292 chrome.exe 3688 chrome.exe 3688 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
pid Process 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe Token: SeShutdownPrivilege 292 chrome.exe Token: SeCreatePagefilePrivilege 292 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe 292 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 292 wrote to memory of 208 292 chrome.exe 74 PID 292 wrote to memory of 208 292 chrome.exe 74 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4628 292 chrome.exe 80 PID 292 wrote to memory of 4832 292 chrome.exe 79 PID 292 wrote to memory of 4832 292 chrome.exe 79 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76 PID 292 wrote to memory of 4428 292 chrome.exe 76
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CuteVirusCollection-master\browser_breaker.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:292 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff8d3349758,0x7ff8d3349768,0x7ff8d33497782⤵PID:208
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1876 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:82⤵PID:4428
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2924 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:1144
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2916 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:1940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1784 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:82⤵PID:4832
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1592 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:22⤵PID:4628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4148 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:82⤵PID:1888
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4264 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:82⤵PID:4828
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=1924 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:2412
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3924 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3068 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:4648
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4384 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:3180
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1952 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:2968
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4252 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3688
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2996 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:2940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3016 --field-trial-handle=2136,i,7604533820078454030,16292606228103378469,131072 /prefetch:12⤵PID:1920
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:920
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k netsvcs -s wlidsvc1⤵PID:2640
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\190b8c2f-eaa9-49a5-9d09-05c492c6669a.tmp
Filesize5KB
MD5dd98a8c7f2b235532cc9d7508a234413
SHA1ab3945ee2c869c6a0a3ccfc0ad9462400000385b
SHA256466b94976344c7897fa776dd20670d70b6c51e6eb7ee6b32c604bebb9952bd0d
SHA5125c831246c5128f0367a3694cd91983c501c035c61249150d258d58f5717e91537957d541d383d980908e328813b68b760f609352918c863719df806b6c54162a
-
Filesize
5KB
MD5cdba2f0d3223f678798279c680617193
SHA12246eee2a36f5688b77cc8f5a6ecb125119385fa
SHA256dd6d9b239a1910bce013f129d22a303c969a66c5b854a00a7e75d2b1621a3c29
SHA5129df92bfd979155d827da72bd7d408321d4f899c8b225efbfc231a5dc08702a7f25feaf05386dc86ec0ef34617e8f45024b5ca4a162660086ecf1f0369df6396c
-
Filesize
5KB
MD565a7836e3225263763c74cf6d962aa1e
SHA1a566ec3a6cae1132c96b94cceb25144ded341866
SHA2566e2022c1ab8cadcc048c7fb86ca086cef7aaafc395d7a0a42067351609d565a2
SHA5121ae9065da75f39ce98c3a51c1e94caca3b398105a0f7806058b17773bb01ec96d5604583adb8e2f344927c914c310e070bc7d6f2bead7e89eccde48ef67ead6a
-
Filesize
3KB
MD5b8f1b5047e7e0907ba4b5f4b64edda81
SHA154e4e699c689844d8b7fc6d6ddd2abcdbef7cdc3
SHA256e2fbd773d7ead606510323d83b92b7fb08cb4f897501f30717e275c5128b6d3d
SHA5121b97ed49204fa6360c5df798d953ee51b53aeda93d8b0ed3030dac634c0f285ed697949e997558cf5fa47c53e5c146519e19b09288a2dbc0cd050b849ffbf0ba
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd