Overview
overview
1Static
static
1OEBPS/Text...1.html
windows10-2004-x64
1OEBPS/Text...2.html
windows10-2004-x64
1OEBPS/Text...3.html
windows10-2004-x64
1OEBPS/Text...4.html
windows10-2004-x64
1OEBPS/Text...l.html
windows10-2004-x64
1OEBPS/Text...e.html
windows10-2004-x64
1OEBPS/Text...t.html
windows10-2004-x64
1OEBPS/Text/3-TOC.html
windows10-2004-x64
1OEBPS/Text...e.html
windows10-2004-x64
1OEBPS/Text...d.html
windows10-2004-x64
1OEBPS/Text...1.html
windows10-2004-x64
1OEBPS/Text...0.html
windows10-2004-x64
1OEBPS/Text...1.html
windows10-2004-x64
1OEBPS/Text...2.html
windows10-2004-x64
1OEBPS/Text...3.html
windows10-2004-x64
1OEBPS/Text...4.html
windows10-2004-x64
1OEBPS/Text...5.html
windows10-2004-x64
1OEBPS/Text...6.html
windows10-2004-x64
1OEBPS/Text...2.html
windows10-2004-x64
1OEBPS/Text...3.html
windows10-2004-x64
1OEBPS/Text...4.html
windows10-2004-x64
1OEBPS/Text...5.html
windows10-2004-x64
1OEBPS/Text...6.html
windows10-2004-x64
1OEBPS/Text...7.html
windows10-2004-x64
1OEBPS/Text...8.html
windows10-2004-x64
1OEBPS/Text...9.html
windows10-2004-x64
1OEBPS/Text...t.html
windows10-2004-x64
1OEBPS/Text...s.html
windows10-2004-x64
1OEBPS/Text...1.html
windows10-2004-x64
1OEBPS/Text...t.html
windows10-2004-x64
1OEBPS/Text...t.html
windows10-2004-x64
1OEBPS/Text/cover.html
windows10-2004-x64
1Analysis
-
max time kernel
1799s -
max time network
1686s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-es -
resource tags
arch:x64arch:x86image:win10v2004-20240226-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
08/03/2024, 19:11
Static task
static1
Behavioral task
behavioral1
Sample
OEBPS/Text/1-Cover-1.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral2
Sample
OEBPS/Text/1-Cover-2.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral3
Sample
OEBPS/Text/1-Cover-3.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral4
Sample
OEBPS/Text/1-Cover-4.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral5
Sample
OEBPS/Text/10-HH-Legal.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral6
Sample
OEBPS/Text/11-eBook-license.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral7
Sample
OEBPS/Text/2-Backlist.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral8
Sample
OEBPS/Text/3-TOC.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral9
Sample
OEBPS/Text/4-Title-Page.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral10
Sample
OEBPS/Text/5-Primarchs-Legend.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral11
Sample
OEBPS/Text/6-Primarchs-Content-1.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral12
Sample
OEBPS/Text/6-Primarchs-Content-10.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral13
Sample
OEBPS/Text/6-Primarchs-Content-11.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral14
Sample
OEBPS/Text/6-Primarchs-Content-12.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral15
Sample
OEBPS/Text/6-Primarchs-Content-13.html
Resource
win10v2004-20231215-es
windows10-2004-x64
Behavioral task
behavioral16
Sample
OEBPS/Text/6-Primarchs-Content-14.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral17
Sample
OEBPS/Text/6-Primarchs-Content-15.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral18
Sample
OEBPS/Text/6-Primarchs-Content-16.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral19
Sample
OEBPS/Text/6-Primarchs-Content-2.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral20
Sample
OEBPS/Text/6-Primarchs-Content-3.html
Resource
win10v2004-20231215-es
windows10-2004-x64
Behavioral task
behavioral21
Sample
OEBPS/Text/6-Primarchs-Content-4.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral22
Sample
OEBPS/Text/6-Primarchs-Content-5.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral23
Sample
OEBPS/Text/6-Primarchs-Content-6.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral24
Sample
OEBPS/Text/6-Primarchs-Content-7.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral25
Sample
OEBPS/Text/6-Primarchs-Content-8.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral26
Sample
OEBPS/Text/6-Primarchs-Content-9.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral27
Sample
OEBPS/Text/6-Primarchs-Content.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral28
Sample
OEBPS/Text/7-Josh-Reynolds.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral29
Sample
OEBPS/Text/8-Extract-1.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral30
Sample
OEBPS/Text/8-Extract.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral31
Sample
OEBPS/Text/9-Newsletter-advert.html
Resource
win10v2004-20240226-es
windows10-2004-x64
Behavioral task
behavioral32
Sample
OEBPS/Text/cover.html
Resource
win10v2004-20240226-es
windows10-2004-x64
General
-
Target
OEBPS/Text/6-Primarchs-Content-4.html
-
Size
28KB
-
MD5
bcc24327106f2bef2657c7f76271c08a
-
SHA1
838973d1b86af500161d0a14de16793055687e05
-
SHA256
8a2f613a079cf795469627497963f483399ac01c9120fbfff817820534a941a5
-
SHA512
d39d7e8e96313a77f5c71998e9873b5f9574212292a4dc6756fc13da3f4ca5db4c237e92bf66c5e4d00a6394077539e48c915ed02ab3d64165c09ff3a18392d4
-
SSDEEP
768:P9RREd9YJk2aw6A01GKWzL0wAv1EpepwA:PemCjuL6Cpe6A
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133544016941540001" chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1780 chrome.exe 1780 chrome.exe 3972 chrome.exe 3972 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 1780 chrome.exe 1780 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe Token: SeShutdownPrivilege 1780 chrome.exe Token: SeCreatePagefilePrivilege 1780 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe 1780 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1780 wrote to memory of 5032 1780 chrome.exe 87 PID 1780 wrote to memory of 5032 1780 chrome.exe 87 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 332 1780 chrome.exe 92 PID 1780 wrote to memory of 3960 1780 chrome.exe 93 PID 1780 wrote to memory of 3960 1780 chrome.exe 93 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94 PID 1780 wrote to memory of 2368 1780 chrome.exe 94
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\OEBPS\Text\6-Primarchs-Content-4.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1780 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeab189758,0x7ffeab189768,0x7ffeab1897782⤵PID:5032
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:22⤵PID:332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:82⤵PID:3960
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2224 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:82⤵PID:2368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2960 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:12⤵PID:5064
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2968 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:12⤵PID:1556
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4832 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:82⤵PID:3912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1716 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:82⤵PID:3424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3268 --field-trial-handle=1856,i,12088598835816169092,12866433153312739606,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3972
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:3504
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD55eb37ed38a60fa85864269b1eee81f04
SHA17dc8b2c2f7792143579bdd88aa311fa1d1b1e3f2
SHA256bfdba2d7cdb6ab9059caa02065af23ae9b2514c98023ab97eb3374499a574405
SHA5124243ebf6465625515a3633ed18f3a7765a79845a815fe00c69a727ca2c76ba4510d5ec1a42f61e7dc849f8846883436bacccc85b149e265b3fc0e69995625a7a
-
Filesize
6KB
MD5592301e9731b29c8454ad5c24a2bef0b
SHA15712428c916126d98c61136f6d051d349911a381
SHA256ddbac7bcea5eafe8f767bcc917dab9bcdd400b12657c2cb9472372d7efec29e9
SHA512cf59d787f8fa9c71fb05ef5d428c117777a1fcf2a875c4dc4d1664922203806369adea2f18de68c42b5223a4fcd76b5f46bb8f76226c7cc7bb6fa02eed4f869e
-
Filesize
253KB
MD51ddab5169fdd761698b5f99e103dfa0f
SHA15f4b45675522eb4b027f95cb8764dfe509e739c2
SHA25638b5a605b69521c16a5132a8098271689502ec785a55045b534796e1ce82c71a
SHA5127f0fbcf1914d3fd2dbd3ca308a6a1de1eee34322693d1c5ed7679a114fd24fddf67c786f1f94a677fa74ca39ef3711830958f4e66318ec082a2529363028903e
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd