Overview
overview
7Static
static
7WaveTrial/...de6.js
windows10-2004-x64
1WaveTrial/...da0.js
windows10-2004-x64
1WaveTrial/...5d4.js
windows10-2004-x64
1WaveTrial/...552.js
windows10-2004-x64
1WaveTrial/...1ec.js
windows10-2004-x64
1WaveTrial/...70d.js
windows10-2004-x64
1WaveTrial/...a05.js
windows10-2004-x64
1WaveTrial/...904.js
windows10-2004-x64
1WaveTrial/...157.js
windows10-2004-x64
1WaveTrial/...5f1.js
windows10-2004-x64
1WaveTrial/...080.js
windows10-2004-x64
1WaveTrial/...5c1.js
windows10-2004-x64
1WaveTrial/...088.js
windows10-2004-x64
1WaveTrial/...402.js
windows10-2004-x64
1WaveTrial/...af6.js
windows10-2004-x64
1WaveTrial/...c14.js
windows10-2004-x64
1WaveTrial/...ca1.js
windows10-2004-x64
1WaveTrial/...d33.js
windows10-2004-x64
1WaveTrial/...x.html
windows10-2004-x64
1WaveTrial/...de.exe
windows10-2004-x64
1WaveTrial/...dex.js
windows10-2004-x64
1WaveTrial/...au.exe
windows10-2004-x64
1WaveTrial/...au.exe
windows10-2004-x64
1WaveTrial/...rt.cmd
windows10-2004-x64
1WaveTrial/...er.dll
windows10-2004-x64
1WaveTrial/dxil.dll
windows10-2004-x64
1WaveTrial/libEGL.dll
windows10-2004-x64
1WaveTrial/...v2.dll
windows10-2004-x64
1WaveTrial/libcef.dll
windows10-2004-x64
1WaveTrial/...er.dll
windows10-2004-x64
1WaveTrial/...-1.dll
windows10-2004-x64
1WaveTrial/...rp.dll
windows10-2004-x64
1Analysis
- max time kernel
165s - max time network
208s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
09/04/2024, 11:02
Behavioral task
behavioral1
Sample
WaveTrial/dist/client/assets/xml-6f44cde6.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
WaveTrial/dist/client/assets/xml-83dafda0.js
Resource
win10v2004-20240319-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
WaveTrial/dist/client/assets/xml-a91ef5d4.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
WaveTrial/dist/client/assets/xml-b4e44552.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
WaveTrial/dist/client/assets/xml-b62ba1ec.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
WaveTrial/dist/client/assets/xml-b6f4a70d.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
WaveTrial/dist/client/assets/yaml-084dfa05.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
WaveTrial/dist/client/assets/yaml-33fab904.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
WaveTrial/dist/client/assets/yaml-823ce157.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
WaveTrial/dist/client/assets/yaml-8d8ef5f1.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
WaveTrial/dist/client/assets/yaml-a4945080.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
WaveTrial/dist/client/assets/yaml-b5e775c1.js
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
WaveTrial/dist/client/assets/yaml-bc731088.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
WaveTrial/dist/client/assets/yaml-c5998402.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
WaveTrial/dist/client/assets/yaml-dc0d6af6.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
WaveTrial/dist/client/assets/yaml-df2b4c14.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
WaveTrial/dist/client/assets/yaml-f7ca1ca1.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
WaveTrial/dist/client/assets/yaml-f8a2dd33.js
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
WaveTrial/dist/client/index.html
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
WaveTrial/dist/node.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
WaveTrial/dist/server/index.js
Resource
win10v2004-20240319-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
WaveTrial/dist/shared/bin/wave-luau.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
WaveTrial/dist/shared/wave-luau.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
WaveTrial/dist/start.cmd
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
WaveTrial/dxcompiler.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
WaveTrial/dxil.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
WaveTrial/libEGL.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
WaveTrial/libGLESv2.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
WaveTrial/libcef.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
WaveTrial/vk_swiftshader.dll
Resource
win10v2004-20240319-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
WaveTrial/vulkan-1.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
WaveTrial/websocket-sharp.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
General
- Target WaveTrial/dist/client/index.html
- Size 642B
- Sample240409-m5awhsdd22
- SHA256 4988e09362697dd88b69e9185f884145ac1b939c1e883855dad7b80479465c17
- MD5 dc0297e1499d6be4efc3d519623623d9
- SHA1 3babddcfc55a2e33f4f21bedd8d15097fe26e8dd
- SHA512 7dbcdcf74a4569b2d188b5ffca867db82acaddabf3c7ba184c62250cbcc375475f31a89607d799021be918dfdf76b5b7a215a87e1a7a157a433f1b8c21f5f61b
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133571347264612929" chrome.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2072 chrome.exe 2072 chrome.exe 520 chrome.exe 520 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 2072 chrome.exe 2072 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe Token: SeShutdownPrivilege 2072 chrome.exe Token: SeCreatePagefilePrivilege 2072 chrome.exe - Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe 2072 chrome.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2072 wrote to memory of 1612 2072 chrome.exe 86 PID 2072 wrote to memory of 1612 2072 chrome.exe 86 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4664 2072 chrome.exe 87 PID 2072 wrote to memory of 4148 2072 chrome.exe 88 PID 2072 wrote to memory of 4148 2072 chrome.exe 88 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89 PID 2072 wrote to memory of 4516 2072 chrome.exe 89
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\WaveTrial\dist\client\index.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2072 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe8d859758,0x7ffe8d859768,0x7ffe8d8597782⤵PID:1612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1752 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:22⤵PID:4664
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:82⤵PID:4148
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2212 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:82⤵PID:4516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2860 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:12⤵PID:3680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2868 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:12⤵PID:2524
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5064 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:82⤵PID:4852
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4460 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:82⤵PID:2608
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3464 --field-trial-handle=1832,i,7335547108380458497,18213552347291368631,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:520
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:4400
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6997a563-2432-46cf-b960-12b6616d8fd2.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 677B
- SHA256 fdcc6a8013abc9802490a55fdd419bc39e90e21a5163e9b03d9cbaecc2673176
- MD5 4c35889abf4b357b7ee335167637f617
- SHA1 d7f3ff26dd82f0e6df6011cce54ea278ee694193
- SHA512 f668c1d05f5d1c9b3385a6edd63c41d9504344783b5fe8c2661ada3f0eeaf83724c04a6402ea4f45d2d49ef10f4f95f24c0518683f8eeea763a526690d733760
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 6KB
- SHA256 b7f2764acc22e599002621c8523a36c62002d7d06ea25eb590681473631c11c1
- MD5 15115dfdcba9fabaff1ddcd074c5c411
- SHA1 a75cf3b809021215ec1ff17ab590cd14bd865fb1
- SHA512 6504c79fd66697922a6fbeda384081e9ff675e906e01e70be5e27e2e363ad483c50ff4a8cb009636e5588a0793ed1e7bda8faf3e01a6eadf14d4b85b289f87ff
- SSDEEP 96:xv6fX0bHQjVKIzOtO98iZRy7Di+6MsmdeZO0FajVhYtjEsXt0/cg2Vup:xSfEbM4C8syy+F3otjEsXtScPS
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e259f6cc-a8ee-4104-a631-ce4bbd8f16ea.tmp
- Size 6KB
- SHA256 ba858188feb66a7e6983ebfcbb17a5c31b88e8e601d3f76d5a3593c72e2a595f
- MD5 94ab9588d65b7178f9cb3b2e91ff1f8d
- SHA1 abe083486341cc99afaae575cce615d0567f9b57
- SHA512 c2c796082ab865959e9dcb6a8a81760112049777fb3e0095d5bf399b589bb56f48cc0f4922e13e6f0a52565df199120812b3846a2e101b84918782d21e6c59d9
- SSDEEP 96:xv6fX0bHQjVKIzOtO98iZRy7Di+6Msmde0IO0FajVhYtjEsXt0/cg2Vup:xSfEbM4C8syy+FVXotjEsXtScPS
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 128KB
- SHA256 7cedad9d78465413d60d64f6c5e2e482d8097341493df3a2c11aac96a1a69b4b
- MD5 f55cca43af7cf79647f78b7bd72db255
- SHA1 d05ce4d412577108ea5341ae0589d1d919e8158c
- SHA512 7219b6f104a218a4888bd259692140c0670427201e9e9ce2115c168ed62e1903887d2ebe112748db733ba23a78f1bf758680674721b91637dbe8ebb6b66b6a4d
- SSDEEP 3072:g4Yb3E/NdvXCNpbMhZGBo4DL0penxA5akNbef2+ZX:TASNdvXCNpbMHtCMpS3
- MD5 SHA1 SHA512 SSDEEP