Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
6_850A9CE91...92.exe
windows10-2004-x64
1_85775FE8A...C0.pdf
windows10-2004-x64
1_857C1A063...C.xlsx
windows10-2004-x64
1_861C5A066...68.jar
windows10-2004-x64
7_874D15677...9B.jar
windows10-2004-x64
7_8799F7153...1D.dll
windows10-2004-x64
1_88ECC22CD...A.html
windows10-2004-x64
1_89C4639AC...1C.jar
windows10-2004-x64
7_8A4455BF4...A8.dll
windows10-2004-x64
3_8A902ECF1...DD.jar
windows10-2004-x64
7_8AE3EAF93...D.html
windows10-2004-x64
1_8AF2F97B5...AF.jar
windows10-2004-x64
7_8CAD92531...44.jar
windows10-2004-x64
7_8EFD210D2...6A.jar
windows10-2004-x64
7_8FCD084FE...B4.jar
windows10-2004-x64
7_903967F51...E1.exe
windows10-2004-x64
1_90FA1CB64...2.xlsx
windows10-2004-x64
1_919844873...8.xlsx
windows10-2004-x64
1_93B373EF7...04.jar
windows10-2004-x64
7_93E97C33E...00.pdf
windows10-2004-x64
1_9420AD2F9...80.jar
windows10-2004-x64
7_94221BE39...A.xlsx
windows10-2004-x64
1_9452A5808...0.html
windows10-2004-x64
1_94C8A56AF...BE.dll
windows10-2004-x64
1_94DF584B0...86.dll
windows10-2004-x64
1_9582D6BA5...D.xlsx
windows10-2004-x64
1_96AA03667...22.dll
windows10-2004-x64
1_9752D5615...DA.dll
windows10-2004-x64
1ISSetup.dll
windows10-2004-x64
1StepOne So....3.msi
windows10-2004-x64
6instmsiw.exe
windows10-2004-x64
7setup.exe
windows10-2004-x64
7Analysis
-
max time kernel
600s -
max time network
612s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 08:01
Behavioral task
behavioral1
Sample
_850A9CE912B13565AF29B34E031CC792.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
_85775FE8A80EE9570FE7A08C75F4D5C0.pdf
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
_857C1A06388DBA2B12F1ABD19D5F03EC.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
_861C5A066E0E465A9C73D7A8BC735568.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
_874D1567799B7B9AFBEE570F7726949B.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
_8799F7153471BC8E3B333E972437C11D.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
_88ECC22CD04E30B687F996108FEE9A6A.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
_89C4639AC9A69DE25B22FD180B6C971C.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
_8A4455BF480BBD2E5E1D2EE0DD0807A8.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
_8A902ECF1774235EEA788809EA57F5DD.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
_8AE3EAF9387809565C1C3DD8855EEF8D.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
_8AF2F97B51B0701F1C5EE9E312FBBDAF.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
_8CAD92531FCEE9FA6989F889207CDA44.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
_8EFD210D2566AB9E39E038BBD504596A.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
_8FCD084FEA1DEADAC814BE0A01BAFCB4.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
_903967F51CF6ABB3C214038FB99275E1.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
_90FA1CB6450C62F6483E2BB820CB8C82.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
_91984487357AC165A53A9419BD22C1E8.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
_93B373EF77137C2F96A8769427AC4304.jar
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
_93E97C33EA3FADA1FF34686C2BDD6300.pdf
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
_9420AD2F98EF4A71E4810AE1456EE580.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
_94221BE3900094783D8A807534FD05EA.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
_9452A580896DE44A8695C6D27604EDB0.html
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
_94C8A56AFEEC9D34E03A0A2DA14CF8BE.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
_94DF584B0D852F45ED59495B3083B186.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
_9582D6BA500CA815CE2C40FEB88634BD.xlsx
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
_96AA03667D6CB6E55CBC8FBA4385D622.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
_9752D56150AC6C43A8ED642651B834DA.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
ISSetup.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
StepOne Software v2.3.msi
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
instmsiw.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
setup.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
_88ECC22CD04E30B687F996108FEE9A6A.html
-
Size
59B
-
MD5
1005241397146b544ca586cda3f69c4e
-
SHA1
b63db3c8404c544ca3def7cd94b35e16a62ea5c5
-
SHA256
87a8d0420653b1b395a233b35560cc57c66f93228c42eb933bb467df1fed8d49
-
SHA512
404cc4a618245c8d1f98575a88c1cf935f250508728172beb192fb9c90acf507da22500e203603f1a4a7ef0d4576d93ec2b4803a90d1612fb7dfc4e91ab804eb
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133483111288726483" chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4836 chrome.exe 4836 chrome.exe 688 chrome.exe 688 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 4836 chrome.exe 4836 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe Token: SeShutdownPrivilege 4836 chrome.exe Token: SeCreatePagefilePrivilege 4836 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe 4836 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4836 wrote to memory of 3612 4836 chrome.exe 78 PID 4836 wrote to memory of 3612 4836 chrome.exe 78 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 408 4836 chrome.exe 95 PID 4836 wrote to memory of 2644 4836 chrome.exe 97 PID 4836 wrote to memory of 2644 4836 chrome.exe 97 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96 PID 4836 wrote to memory of 5096 4836 chrome.exe 96
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\_88ECC22CD04E30B687F996108FEE9A6A.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4836 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffec3249758,0x7ffec3249768,0x7ffec32497782⤵PID:3612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1700 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:22⤵PID:408
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2204 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:82⤵PID:5096
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:82⤵PID:2644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3104 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:12⤵PID:4712
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3136 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:12⤵PID:4396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4836 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:82⤵PID:2680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4940 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:82⤵PID:1480
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2408 --field-trial-handle=1872,i,9312815968735896371,16312932169541433597,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:688
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:4080
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD54f1865db84aa87a68df1807b457727dc
SHA144523de21efbd606427538a1b8c232d4f9bae2e6
SHA2565e2d4614b6dfb4e6e0bc8e2ab7bcbfcbd366fafafc659d73bde7e66693c8dde1
SHA512ebebbc0c606cc98befb99300b3c541df287810205a5093caafa96fa4ed509a5d016995eda84f4d7723a88f13d17080f0209769dffcb2ece2a6c490aa06203e2f
-
Filesize
6KB
MD57646e7416ee78aaae6dfae325101bfeb
SHA111128aaaa90f66b8fc1b2cdbbf7d7b34464e289d
SHA2564c90fc50e44b6fed2bfc909998e3c58a01a5601de079680c5d7d6803cfa7b273
SHA51290600e72a87aa9f8de2d51b19bb8935669ac4fac3042c23eb309bf8748e28d6b12055a1d2c2425252c33dde5147cd19f577528c2554f24d964031289c30e67fd
-
Filesize
114KB
MD5a9f7604551e55350491098ab601a3214
SHA1a181786ae4b36716f0e06f37fe7f925b99e38a32
SHA2560d5b3ae596e0d1dcc7e56271279608076e356ffc0143810cb8c163b2132a4909
SHA512c93f17afa84e0c0d73b9c9125e46e74d4d109545f4add14228c77d7a40699b2a4ceb2cd7618782ad6a62a6094c967be3db79da31a971f1b2f1e87002cdb99d3c
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd