Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
6_850A9CE91...92.exe
windows10-2004-x64
1_85775FE8A...C0.pdf
windows10-2004-x64
1_857C1A063...C.xlsx
windows10-2004-x64
1_861C5A066...68.jar
windows10-2004-x64
7_874D15677...9B.jar
windows10-2004-x64
7_8799F7153...1D.dll
windows10-2004-x64
1_88ECC22CD...A.html
windows10-2004-x64
1_89C4639AC...1C.jar
windows10-2004-x64
7_8A4455BF4...A8.dll
windows10-2004-x64
3_8A902ECF1...DD.jar
windows10-2004-x64
7_8AE3EAF93...D.html
windows10-2004-x64
1_8AF2F97B5...AF.jar
windows10-2004-x64
7_8CAD92531...44.jar
windows10-2004-x64
7_8EFD210D2...6A.jar
windows10-2004-x64
7_8FCD084FE...B4.jar
windows10-2004-x64
7_903967F51...E1.exe
windows10-2004-x64
1_90FA1CB64...2.xlsx
windows10-2004-x64
1_919844873...8.xlsx
windows10-2004-x64
1_93B373EF7...04.jar
windows10-2004-x64
7_93E97C33E...00.pdf
windows10-2004-x64
1_9420AD2F9...80.jar
windows10-2004-x64
7_94221BE39...A.xlsx
windows10-2004-x64
1_9452A5808...0.html
windows10-2004-x64
1_94C8A56AF...BE.dll
windows10-2004-x64
1_94DF584B0...86.dll
windows10-2004-x64
1_9582D6BA5...D.xlsx
windows10-2004-x64
1_96AA03667...22.dll
windows10-2004-x64
1_9752D5615...DA.dll
windows10-2004-x64
1ISSetup.dll
windows10-2004-x64
1StepOne So....3.msi
windows10-2004-x64
6instmsiw.exe
windows10-2004-x64
7setup.exe
windows10-2004-x64
7Analysis
-
max time kernel
599s -
max time network
515s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 08:01
Behavioral task
behavioral1
Sample
_850A9CE912B13565AF29B34E031CC792.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
_85775FE8A80EE9570FE7A08C75F4D5C0.pdf
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
_857C1A06388DBA2B12F1ABD19D5F03EC.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
_861C5A066E0E465A9C73D7A8BC735568.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
_874D1567799B7B9AFBEE570F7726949B.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
_8799F7153471BC8E3B333E972437C11D.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
_88ECC22CD04E30B687F996108FEE9A6A.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
_89C4639AC9A69DE25B22FD180B6C971C.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
_8A4455BF480BBD2E5E1D2EE0DD0807A8.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
_8A902ECF1774235EEA788809EA57F5DD.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
_8AE3EAF9387809565C1C3DD8855EEF8D.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
_8AF2F97B51B0701F1C5EE9E312FBBDAF.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
_8CAD92531FCEE9FA6989F889207CDA44.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
_8EFD210D2566AB9E39E038BBD504596A.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
_8FCD084FEA1DEADAC814BE0A01BAFCB4.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
_903967F51CF6ABB3C214038FB99275E1.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
_90FA1CB6450C62F6483E2BB820CB8C82.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
_91984487357AC165A53A9419BD22C1E8.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
_93B373EF77137C2F96A8769427AC4304.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
_93E97C33EA3FADA1FF34686C2BDD6300.pdf
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
_9420AD2F98EF4A71E4810AE1456EE580.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
_94221BE3900094783D8A807534FD05EA.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
_9452A580896DE44A8695C6D27604EDB0.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
_94C8A56AFEEC9D34E03A0A2DA14CF8BE.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
_94DF584B0D852F45ED59495B3083B186.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
_9582D6BA500CA815CE2C40FEB88634BD.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
_96AA03667D6CB6E55CBC8FBA4385D622.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
_9752D56150AC6C43A8ED642651B834DA.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
ISSetup.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
StepOne Software v2.3.msi
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
instmsiw.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
setup.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
_9452A580896DE44A8695C6D27604EDB0.html
-
Size
16KB
-
MD5
7aa4215a330a0a4f6a1cbf8da1a0879f
-
SHA1
a533b2c9b72911ef98f25912554b5aacc95e5ea1
-
SHA256
4fd64aeed340d62a64a8da4b371efe0f6d0d745f4d2dbefacba86c646d36bc72
-
SHA512
24e9f97196aa63bad54245a69d5d9a24f154638af81c99ad60a0b08d15b8a18ce35c9592a1efb214f80cda8d9637bb1e167798233aac2bc75ca57935a65bf8bf
-
SSDEEP
384:26ipihOh2GN/qyuotZ1JlqoGRWLcTzX8M:TipihOtYDotVyWITr
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133483111503246859" chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3528 chrome.exe 3528 chrome.exe 3552 chrome.exe 3552 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 3528 chrome.exe 3528 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe Token: SeShutdownPrivilege 3528 chrome.exe Token: SeCreatePagefilePrivilege 3528 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe 3528 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3528 wrote to memory of 4716 3528 chrome.exe 90 PID 3528 wrote to memory of 4716 3528 chrome.exe 90 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 212 3528 chrome.exe 92 PID 3528 wrote to memory of 4580 3528 chrome.exe 94 PID 3528 wrote to memory of 4580 3528 chrome.exe 94 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93 PID 3528 wrote to memory of 2744 3528 chrome.exe 93
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\_9452A580896DE44A8695C6D27604EDB0.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3528 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ffe0a729758,0x7ffe0a729768,0x7ffe0a7297782⤵PID:4716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1648 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:22⤵PID:212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2196 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:82⤵PID:2744
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:82⤵PID:4580
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2996 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:12⤵PID:1916
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2988 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:12⤵PID:3488
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4724 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:82⤵PID:2292
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4596 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:82⤵PID:4704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1788 --field-trial-handle=1632,i,1949253245723763651,9406381947649955130,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3552
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:4744
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD505c0371d43cdcfeca7b9e67c38fd44b7
SHA158ba67aa096a02dd8f1045a9db27f04b600c88e6
SHA256e2cac378ee560d1fc5624513d803a80735cca512c4d2e680d1c89d7736c4d88f
SHA512290f2819b24a9209d67e530071892681f7ef5b0e4b66a63f8f4510cf0770f3b3b0890bc27f7bf9f6fda1b8b4cd525f167624a309251a1d85dfd936746c20c099
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd