Analysis
-
max time kernel
60s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:50
Static task
static1
Behavioral task
behavioral1
Sample
SKlauncher-3.2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SKlauncher-3.2.exe
Resource
win10v2004-20240226-en
General
-
Target
SKlauncher-3.2.exe
-
Size
1.6MB
-
MD5
b63468dd118dfbca5ef7967ba344e0e3
-
SHA1
2ba4f0df5f3bd284bf2a89aba320e4440d8b8355
-
SHA256
05ae2f0dd61ef10019b94c200e8df192b767bb4cc24a7e7b329ab43cc9c74caf
-
SHA512
007ecb7445dc0c01a802b5a2c91313aae59f9dc96e27455dd85e7a92a4e649d683fbc2ada5f48925d9ab3b4fdaea20aa89eeb442fde079902aecb5ca3454a548
-
SSDEEP
49152:HIBc3n9dRvwVlzhFAQ/ggUTPQjYEiim7V:oBaO/FAqMQjYEXm
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2308 chrome.exe 2308 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe Token: SeShutdownPrivilege 2308 chrome.exe -
Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe 2308 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2308 wrote to memory of 2164 2308 chrome.exe 29 PID 2308 wrote to memory of 2164 2308 chrome.exe 29 PID 2308 wrote to memory of 2164 2308 chrome.exe 29 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2628 2308 chrome.exe 31 PID 2308 wrote to memory of 2804 2308 chrome.exe 32 PID 2308 wrote to memory of 2804 2308 chrome.exe 32 PID 2308 wrote to memory of 2804 2308 chrome.exe 32 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33 PID 2308 wrote to memory of 2968 2308 chrome.exe 33
Processes
-
C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.exe"C:\Users\Admin\AppData\Local\Temp\SKlauncher-3.2.exe"1⤵PID:1972
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2308 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7039758,0x7fef7039768,0x7fef70397782⤵PID:2164
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1112 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:22⤵PID:2628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1488 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:2804
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1628 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:2968
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2284 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:3016
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2324 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2140
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1112 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:22⤵PID:956
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1284 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3460 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:2404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3552 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:1512
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3680 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:1148
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3764 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2868
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3504 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2820
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3472 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4012 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2008
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2420 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2500
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3896 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2584
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=1352 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=1040 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:996
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3504 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:1112
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2464 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:888
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=2440 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1916
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3904 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:764
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2356 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=3416 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1184
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=692 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1572
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4048 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:2028
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4176 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:3008
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4100 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1448
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=4132 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:904
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=1096 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:996
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=2348 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1816
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1044 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:2240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4348 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:82⤵PID:2028
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=1860 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:1416
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=1028 --field-trial-handle=1356,i,18023282908202317907,14736123993726250163,131072 /prefetch:12⤵PID:2724
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2904
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
58KB
MD59b603992d96c764cbd57766940845236
SHA14f081f843a1ae0bbd5df265e00826af6c580cfe7
SHA256520408fec7c6d419184ec68ad3d3f35f452d83bd75546aa5d171ffc7fe72cb2b
SHA512abd88ee09909c116db1f424f2d1cbc0795dbc855fef81f0587d9a4e1a8d90de693fa72841259cf4a80e0e41d9f3e1f4bf3a78c4801264e3e9c7d9635bb79ccf5
-
Filesize
40KB
MD50f81b6d61de3f11df96afa46fb362f45
SHA1b73925c797fcb5e23b0e0495ebdfb629d16f26e4
SHA2567171337d694e449b8c4923733effa4185a3eddb330b96e9fd0e4e3497faf5364
SHA5121c97e4e7357d385613f05f7a16439c25614d553cafdbd18a197c4a369726ec28b372ec6bed8b87a968d74a2585e3c999da9799e6cf558fa9ce25f87010d0e617
-
Filesize
96B
MD5666cd5349b2a360836f8ba64bea440da
SHA119476625fdc88ac09c45a47d79493219ec6e3e6f
SHA256695c8e742c72f7b3527ef59056577b3c5fc7d1d1ef706f1ba91c38808bc16b99
SHA512550bc849114b96093b3bce2a102f36cd1b55e76bce5553404bcfcabb2d4ecb1d68315557f69f9c7445a01ed75fc67ae1731c8e1414ddbdcdda473394dd090e83
-
Filesize
16B
MD5aefd77f47fb84fae5ea194496b44c67a
SHA1dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA2564166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT~RFf77e3e9.TMP
Filesize16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
1KB
MD551d2a8c3f2ed1a7bf6b2866a737d1a36
SHA15960c55ce18ab63c5b8cbc12d9583225966e2503
SHA2567646531b6673b5ddbb7c5814c4d41ce6eea69ea5dc39e8537e8b43c610934e57
SHA512b346255bf2e232aede15d87b618afa81f835b67fc277b5f845b162c8a90235fdb268dc1c3a7890f2bfb3acd47dd256504034ad40b6361ad546b26d3b1b16ec0d
-
Filesize
200B
MD5fdaf3cde22ee8eada721a71206f84a9b
SHA19e695d028022e43ac79036dff77099cc6d40ea51
SHA25607ef4d23b2469b6f0a1bd361c4694fa27949d9c542deac0a8c80240c25249e2a
SHA5122255aacdac842530dc76ae9ecb88da2fd6f306fc0117a8c3b2f8f757ba48fb5c13e43cc2ec9a5cb07a17fd2d7298f65cab24d266beb2a0f1af9162f15011daa6
-
Filesize
200B
MD5a5e682a709ed5d3582c663b4222642eb
SHA159e2267f25ff96642ae51d615b00d01b2738f760
SHA2564d16d3272fec8284eca8e2934ae961d715729444ff95c98d7846c4e5328a2343
SHA512ab7d1fbfe4facd97d2b4b56c2b32f444cc3d91ec18ee6e8fe615d672cfcc342a368918646e34477a41cb2e287b42a6c283fe385009972f6366379a2ca1438d8d
-
Filesize
200B
MD52948a11016ace51ecb9aa463703f2c4e
SHA12efc2312905b7a21bc3561a4dafcc24b360e9ada
SHA256389499b04914eca767b584ec29c36e4b3bde2c7042d0c988db86b11476d9212f
SHA5123dc908a6ae1599ac28faad9bc44fd6395b66f650143138383811258086f6b645472663bcbd3b2ebe0c2ab419c2418bd532357949c259bf3b537a4913080db3c4
-
Filesize
6KB
MD56100e80b42645d89cc122c0eb3c19d5b
SHA19250d67ccb7c06c5f528cf812239a658dd36bfe9
SHA2566eb1e5935608c86ca765ea9b989952037e9961562793954ee7ae4e15dfc63e48
SHA512d3d59f0e220a9d9a43a780c87af61f8cc8e092a0c31528cfbe0337bb726da15a6ba3d4b533dea827f1197cd95bfd0e3dfa30dc222dcf40334a985a80ec73c371
-
Filesize
6KB
MD5190e761ac5e7b2d1c8b6b484e6d855ba
SHA1fb569a2c255cbf608cb79e2c8bf2e9cea0d729fa
SHA256e4812f9a46abfed62a1b311740c1edf30d1db35d6684d9666b11ee71b12c10dd
SHA5120fd53f715b8e541c9c49e1f8b6ec0d225d94063329c5a02b777763867f910b88e3b71ecfee342bb497e88c024329ae286a6980030eb38f860f6618a90b0ad11a
-
Filesize
5KB
MD5f85132b74e66defe728eb8a5904ab118
SHA18ec09937571d36862c500be173aaa9d5d5bdbcb0
SHA256a16bd9d4472c9038f80a7666953b7d69edba9f62bfb5efc364eb353b480b6cb2
SHA5122d8f44d24d0fd0c32b9b79d7747db8923a811e549f8e1e879bc37b711137528e7dd24620f1a71cfacf78601fab8981612ffa70beb1f12a4e6be40ff953464893
-
Filesize
5KB
MD5883b4bfff530c775a2cd60bed8aaebf4
SHA186067a76efbda7fdcb9b7fe213b321c45038eff8
SHA256158e852d8f663681e66fb38de95c139cde2c665f2581cad0525cdbdcbdb1ddc0
SHA512fd1bd62d16d076e95da87551ceb966a72a8064a081e716e4a81ff1eca3537b677b9756e986873eb54e1897451b68c25a41550702f3bf7e25b03ab354b01f7cd9
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000007.dbtmp
Filesize16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
-
Filesize
139KB
MD54f3dc0e219d68c6dce566dc1327d9f83
SHA1ec05890b4cabce225e63de481caef1fc5421837f
SHA256576e6c3bbd3ecdd6861852fc71f07cd9cb4a360583f0e9a9e75c82e0e7c1cadd
SHA51268bdaf170489efc3b3f63fa9642cda6d7f7a6d31ef811b27a12ac57e3879cc55ad30c9c5142a774c98dc2a6bcf6957baf3a0318981fb832c5be5ccee0649fd94
-
Filesize
139KB
MD53f5f818131c3fa978f9619f042e79b3f
SHA1e1af681dd1487c1c38ba97d0c5eb307cd2a2a93c
SHA256817577a4dbb173f94cd85a0f75a647ddcfd595b6997efd68228559a9702ebbd5
SHA51209b99797370581f660964891cc6b67fcfd435053d319d370b5a3553bc7ff41f6194ec9b391d2db5add370bc1feea8ca0689e26fb60a509fc1fd447cc8febf19c
-
Filesize
139KB
MD5c8cca0cf9788f35b3ac1135ef38d2e06
SHA1ad8b80a0c46b40f47e3f47a9b5801418c85aa481
SHA256c530256a5133eb363eb8024550a1c8ce1edaae6b761411cbe146797c5ee2e429
SHA512753196ad55de4434ea48388b8ce5157c2ca5f8ad47a203ec0af5a43ff1da009b9a782e147abf3f32a83c182a608581f4b7a0697d6f51fc8e574e9948aab187fc
-
Filesize
139KB
MD51bef894daf78d12981acb256612fa393
SHA1d19e064014a471f6392a8cb53cac3e729497cece
SHA25692e12a7ba05b7e607fb5cdb610c59f6d7f26693b4cf287fa95cb01525924b8fb
SHA5122d5b009bc5de2f458ffe335507e005b9183beacfa000c499a009db6b9e7c40dafbe8ddeac0580c3e3d0e9f1c1ee79259ddbecdb607153a27e4c62d45981bfffb