Overview
overview
7Static
static
7WaveTrial.rar
windows7-x64
7WaveTrial.rar
windows10-2004-x64
7WaveTrial/...a4a.js
windows7-x64
1WaveTrial/...a4a.js
windows10-2004-x64
1WaveTrial/...ffe.js
windows7-x64
1WaveTrial/...ffe.js
windows10-2004-x64
1WaveTrial/...d07.js
windows7-x64
1WaveTrial/...d07.js
windows10-2004-x64
1WaveTrial/...7a1.js
windows7-x64
1WaveTrial/...7a1.js
windows10-2004-x64
1WaveTrial/...78e.js
windows7-x64
1WaveTrial/...78e.js
windows10-2004-x64
1WaveTrial/...aae.js
windows7-x64
1WaveTrial/...aae.js
windows10-2004-x64
1WaveTrial/...6ca.js
windows7-x64
1WaveTrial/...6ca.js
windows10-2004-x64
1WaveTrial/...311.js
windows7-x64
1WaveTrial/...311.js
windows10-2004-x64
1WaveTrial/...3f8.js
windows7-x64
1WaveTrial/...3f8.js
windows10-2004-x64
1WaveTrial/...c4a.js
windows7-x64
1WaveTrial/...c4a.js
windows10-2004-x64
1WaveTrial/...79e.js
windows7-x64
1WaveTrial/...79e.js
windows10-2004-x64
1WaveTrial/...ec3.js
windows7-x64
1WaveTrial/...ec3.js
windows10-2004-x64
1WaveTrial/...892.js
windows7-x64
1WaveTrial/...892.js
windows10-2004-x64
1WaveTrial/...aa9.js
windows7-x64
1WaveTrial/...aa9.js
windows10-2004-x64
1WaveTrial/...c70.js
windows7-x64
1WaveTrial/...c70.js
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 09:51
Behavioral task
behavioral1
Sample
WaveTrial.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
WaveTrial.rar
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
WaveTrial/dist/client/assets/fsharp-126b7a4a.js
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
WaveTrial/dist/client/assets/fsharp-126b7a4a.js
Resource
win10v2004-20240319-en
Behavioral task
behavioral5
Sample
WaveTrial/dist/client/assets/go-80837ffe.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
WaveTrial/dist/client/assets/go-80837ffe.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
WaveTrial/dist/client/assets/graphql-60335d07.js
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
WaveTrial/dist/client/assets/graphql-60335d07.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
WaveTrial/dist/client/assets/handlebars-15abc7a1.js
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
WaveTrial/dist/client/assets/handlebars-15abc7a1.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
WaveTrial/dist/client/assets/handlebars-278f878e.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
WaveTrial/dist/client/assets/handlebars-278f878e.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
WaveTrial/dist/client/assets/handlebars-27d2aaae.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
WaveTrial/dist/client/assets/handlebars-27d2aaae.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
WaveTrial/dist/client/assets/handlebars-316c66ca.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
WaveTrial/dist/client/assets/handlebars-316c66ca.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
WaveTrial/dist/client/assets/handlebars-47651311.js
Resource
win7-20240319-en
Behavioral task
behavioral18
Sample
WaveTrial/dist/client/assets/handlebars-47651311.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
WaveTrial/dist/client/assets/handlebars-526b83f8.js
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
WaveTrial/dist/client/assets/handlebars-526b83f8.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
WaveTrial/dist/client/assets/handlebars-68e2cc4a.js
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
WaveTrial/dist/client/assets/handlebars-68e2cc4a.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
WaveTrial/dist/client/assets/handlebars-728a179e.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
WaveTrial/dist/client/assets/handlebars-728a179e.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
WaveTrial/dist/client/assets/handlebars-83e2dec3.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
WaveTrial/dist/client/assets/handlebars-83e2dec3.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
WaveTrial/dist/client/assets/handlebars-8c77b892.js
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
WaveTrial/dist/client/assets/handlebars-8c77b892.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
WaveTrial/dist/client/assets/handlebars-b5189aa9.js
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
WaveTrial/dist/client/assets/handlebars-b5189aa9.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
WaveTrial/dist/client/assets/handlebars-dade7c70.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
WaveTrial/dist/client/assets/handlebars-dade7c70.js
Resource
win10v2004-20240226-en
General
-
Target
WaveTrial.rar
-
Size
156.4MB
-
MD5
0159c8632597db4afc30105f24cdd3ea
-
SHA1
5e80272c6ff0d820cdb0a4f98f7fbf0d558f5957
-
SHA256
0ff0224edb6a27b5c23adc7fb759864bb3c645f2cf2f38d0a0290c1fa691fdd2
-
SHA512
587e4dc7ae21036f3aaec3e99955670ef0c457fab23db79b71f0963acc79a1f2eca61b2233b6770672a139b0f8a9ae98ad65bed2431aac476fe7d4e293e666fe
-
SSDEEP
3145728:GeUQUfKvWr13d8VZDUdp27PkF5oeUahBcPVyMVob2395nOl0tUD:MKuh+DU72TkF5oeVBMX3nnptUD
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2580 Wave.exe -
Loads dropped DLL 6 IoCs
pid Process 2592 7zFM.exe 2600 WerFault.exe 2600 WerFault.exe 2600 WerFault.exe 2600 WerFault.exe 2600 WerFault.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 2592 7zFM.exe 2480 chrome.exe 2480 chrome.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2592 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 39 IoCs
description pid Process Token: SeRestorePrivilege 2592 7zFM.exe Token: 35 2592 7zFM.exe Token: SeSecurityPrivilege 2592 7zFM.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe Token: SeShutdownPrivilege 2480 chrome.exe -
Suspicious use of FindShellTrayWindow 37 IoCs
pid Process 2592 7zFM.exe 2592 7zFM.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe 2480 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2948 wrote to memory of 2592 2948 cmd.exe 29 PID 2948 wrote to memory of 2592 2948 cmd.exe 29 PID 2948 wrote to memory of 2592 2948 cmd.exe 29 PID 2592 wrote to memory of 2580 2592 7zFM.exe 30 PID 2592 wrote to memory of 2580 2592 7zFM.exe 30 PID 2592 wrote to memory of 2580 2592 7zFM.exe 30 PID 2580 wrote to memory of 2600 2580 Wave.exe 31 PID 2580 wrote to memory of 2600 2580 Wave.exe 31 PID 2580 wrote to memory of 2600 2580 Wave.exe 31 PID 2480 wrote to memory of 2508 2480 chrome.exe 33 PID 2480 wrote to memory of 2508 2480 chrome.exe 33 PID 2480 wrote to memory of 2508 2480 chrome.exe 33 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 2704 2480 chrome.exe 35 PID 2480 wrote to memory of 696 2480 chrome.exe 36 PID 2480 wrote to memory of 696 2480 chrome.exe 36 PID 2480 wrote to memory of 696 2480 chrome.exe 36 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37 PID 2480 wrote to memory of 1032 2480 chrome.exe 37
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\WaveTrial.rar1⤵
- Suspicious use of WriteProcessMemory
PID:2948 -
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\WaveTrial.rar"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2592 -
C:\Users\Admin\AppData\Local\Temp\7zO02A57E46\Wave.exe"C:\Users\Admin\AppData\Local\Temp\7zO02A57E46\Wave.exe"3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2580 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2580 -s 6364⤵
- Loads dropped DLL
PID:2600
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2480 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7059758,0x7fef7059768,0x7fef70597782⤵PID:2508
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1164 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:22⤵PID:2704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1500 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:82⤵PID:696
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1592 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:82⤵PID:1032
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1476 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:12⤵PID:1532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2276 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:12⤵PID:1212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1156 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:22⤵PID:1152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1408 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:12⤵PID:2208
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3444 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:82⤵PID:1828
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3564 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:82⤵PID:912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:82⤵PID:2104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3748 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:12⤵PID:2332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4008 --field-trial-handle=1140,i,3387112798006627235,7144836666493002655,131072 /prefetch:82⤵PID:2488
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:1540
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}1⤵PID:3044
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16B
MD5aefd77f47fb84fae5ea194496b44c67a
SHA1dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA2564166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
5KB
MD528d470ae2e803f7a65b20fa58221a9a0
SHA1c145a90420b2926616732ecae6ad957246119f9c
SHA256144325288a7ccd7e70b007f48abedca27304fe73f71a892f05994f67b7debc82
SHA512dfed82ac6fb481ccd3cd57dcfee8ea58b38fe79113b1b6ef8f85ee382f2aa3e42e5c774868f985998a7ec4f9af60106d685457a71152bc9416a5087a2d76109f
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
-
Filesize
261KB
MD5c5050b6f85e667b72078c2d504e45505
SHA12d7a3ddea66d79c7a508cf014833db0c5d8f5f77
SHA25631cd7d777c115eb0c93cbc300e1f4abcd04f1af3900fa5f4d2c4a14a013369d4
SHA5123132da9bd41f4ed4a9c84bfdfb51b0245d95bd8bf50b2cca91343f1d0baafccdc61d82711c76b25b8520bdcdd6899d34d62931a7eb544868d4aefcca8a732871
-
Filesize
261KB
MD5a1d4177f1b1240f9965a6a1196312e23
SHA12f89121375808bc42695a65e12ad3720f691c547
SHA256080a5002cc58c36fb5dbe2583a28beb8bfdf68334a930050757f9a9613aa8a25
SHA512b9c41691579e15621ef75248d0c8b1ff1fbe5c3626ae8801e35e2fda92b0d28f3d2f98f02323cfec76ed055eec2a995b4d925db44759dfb0e1309751b14733db
-
Filesize
7.0MB
MD5a8bd4a6b2f1d00928e61870a5688c13d
SHA1e17646d5279534f2e3eb0e0cfc8b6c536bc0c095
SHA2562c51f67e236cf95e2d51df4178699da09869ab077924cff0b3df1c512878ef2f
SHA5126b5175beea4071668c87b16af3177bbb2cbaff6b28909dc1e09ad5b16b449c62d6adc372a0094de627fe9835f0c474d16708c3f698355ba1664bf321fa19f5fb