5f120765ecc80b6e65c276515f332e7564ccc22acd162ccaef4ee13f06289a21

max time kernel
52s
max time network
55s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
28/04/2024, 11:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Challenger_Template_Top.png
Size 1.0MB
Sample240428-ndgenaed78
SHA256 5f120765ecc80b6e65c276515f332e7564ccc22acd162ccaef4ee13f06289a21
MD5 ab09f1f47da2fa0985db425337d9ad40
SHA1 8b517050bca34bb74cf609edefad52ba6f7234c8
SHA512 2c3b505512718225a1cd276ecab3fa968dd3efc7889679cdff33caefbd84ef5d14a81cccad3b794fdd40b9fc1baaeb895dceb8d95fe04de0f7ba5c6f70af95cd
SSDEEP 24576:uuITarDwiGGs3zWBZ9wcqyOIiAC8WfBqcGBXST:HITiwiGGs3zQZ9wcJ71WfDGBX2
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133587766236827433"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2904	chrome.exe
2904	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe
Token: SeShutdownPrivilege	2904	chrome.exe
Token: SeCreatePagefilePrivilege	2904	chrome.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe
2904	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2904 wrote to memory of 3048	2904	chrome.exe	84
PID 2904 wrote to memory of 3048	2904	chrome.exe	84
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 2368	2904	chrome.exe	85
PID 2904 wrote to memory of 4484	2904	chrome.exe	86
PID 2904 wrote to memory of 4484	2904	chrome.exe	86
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87
PID 2904 wrote to memory of 3004	2904	chrome.exe	87

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Challenger_Template_Top.png
1⤵
PID:5060

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffadffbcc40,0x7ffadffbcc4c,0x7ffadffbcc58
  2⤵
  PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1756,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=1744 /prefetch:2
  2⤵
  PID:2368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2020,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2068 /prefetch:3
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1972,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3096,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3176,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4432,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4672,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4972,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4608,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3088,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3728,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5176,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4544,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3484,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3488,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4368,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4496 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3400,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4508,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5036,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3328,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=3444,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5300,i,3704937550884513693,7096380842252406580,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4496 /prefetch:1
  2⤵
  PID:5012

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:1092

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 1f2f201802dfbe16c2972f8727e6b3ffb5a7349a0bba72de469a8d2f4b3a170c
MD5 ffd13c7445a76d54a81b50b48e24d9c1
SHA1 e13e92fb3ea79eee3e010a4ea357456bad7d9974
SHA512 8b736f2605cecf3845d33cd9048fb8c034664ede8f4901aad6d56e5ea5647c338e6cdb07a040eab5cb8f7e93ac3b02c6da4b7632435c019d9e4cba0dcc5485ee
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 08ff44c5310aadafd1a8a3cbad19f33b0bec8509e87b0e1aafe986fbc0dfd96b
MD5 312225bc37e3ef137c0019a0f8992707
SHA1 4ad6e1b02d5921a64f4971b9da0f775cb43f151f
SHA512 dff192579a6217da8e9cbf24532e88ec0cc8d2ee9932b84fbbdb94dda15072974c718b2c11bae94ae9176edaa7fc41b311ebd3bbf4d9f078958215f2964cafca
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 ab44e6affa3a5bd43d3c579b738e6633b8ce000d53bfd59534da5da8b68dd6b7
MD5 050967c9383f2bcbabb9019f88a86073
SHA1 4fa3d47e85ae07844a0ac7fff66ca74a9b59adde
SHA512 649ae25e242d7d8dda72fb96061e9363af96f796e42edc90781ea0a576d33bd1c195e7f896744962b99ec55ee62d5307f515ad93abbea81fb47ec43b4ebc66e6
SSDEEP 192:BczXCvGhe6fEEejcqHV+FRaFsEkw25GuetPo6yIsnVdg4:BczXCvUFwc+GRazyGu44
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 0736f80b6d6e21c34dc26f37f4de09ef0e90c5425b75b5d9227f6a88ae162da5
MD5 03a6fc01163fa29dd98ac98e3a583820
SHA1 5f12940a6e625351960f424af277eb2b78e5e337
SHA512 e7d576ab340086559378ffa089e44fc317e2608b5494bb073310e6e666971f525a5efe9baeeb48d7815b4d70dd47e827000e31018bebc4d8ea1e119b89f40ce7
SSDEEP 192:/czrcBCCvGhe6fEkefcqHV+FBokaLEkw2mGuetPo6yIsnVdg4:/czrmCCvUF2c+G6kaQFGu44
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 849f594b67b6e3db6aa77388349987118d356c2a8c91e5f25e214c647d525852
MD5 62abdd87a4f9992af6eb95ca8dcdcbee
SHA1 4a06202ab3b6074130174fdc3dc64f218ea2d5c3
SHA512 6975d0b012d06c0a1d1c39d11137ba00d1de875ab05298d8fdef27c6b7ca0cd1de40f23da6eac81a1b9a7808cd6411bf6a2e4e17f3259e2caf9d0e3185b69df4
SSDEEP 192:/czrcBCCvGhe6fEkelcqHV+FBokaGEkw2mGuekrdo6yIsnVdg4:/czrmCCvUFcc+G6kazFGu7L4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 5fbb0b9abcc5e197bd89c6724400911e2e5cf7ed06e4a42516513470a9b7633f
MD5 d7f03a1ef91b93fe888ff88b6d47b5a2
SHA1 65225a6877283216faaf97d28fa01ecdd92a48aa
SHA512 dcb8f2a9277dc771be4155aa08a6023f53f3ca5afadd84aa7f7b79e8dd4be48aefae94d00569036882b38862b30d6ae19cdba61d6c6ea8f54d97d852815ffccf
SSDEEP 192:BczrcBCCvGhe6fExeYcqHV+FRaFsEkw25GuetPo6yIsnVdg4:BczrmCCvUFYc+GRazyGu44
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 77KB
SHA256 3e34e51cdd661ab6812d68f417c7facef1d05953a62aeb2ae88300b68395e302
MD5 ac97467f75ec2f4ef6176a1afa5de923
SHA1 72c37cdc3679d5695fed2737c26cb54cc6003c52
SHA512 f483021e6546b2182f4c2d81ed0190a56a69fd231f2210429439c1670d6a70639d151dea46d1f30e638972955c6f171230465b55f92a4486d632fc92efd5bda7
SSDEEP 1536:Qumvprt5iWIc8Obp8Dy9drEltd6Vt3nWvQoFQGeB/9WoIawoTvP9:Hm9t5iWUEp82vQ0QaD9W3aPN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 77KB
SHA256 0977855ef515cee668cad634ff8e833257ab58dacfc6df1455edccefd317994c
MD5 2913d687eb870b3ef6f4a5e94dc50fe1
SHA1 e717cc69d85655f3f85381a3baa22309af025ede
SHA512 5480e8f24402e0598ab4752dd14c69516226648ff6608149613c1134c0160f68b2508078056ca7ad22b1ae134abc5fb4455a1ad523099ef387cab5f27267a3ca
SSDEEP 1536:iumvprt5iWIc8Obp8Dy9drEltd6Vt3nWvQoFQGeB/9WoIawoTvP9:pm9t5iWUEp82vQ0QaD9W3aPN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 77KB
SHA256 8b6de0e3575022e442a822fc5aa159f90ddb7911882eb5c267f066b93d56f3e3
MD5 27703e593099dc573211e0e30ffb6cd6
SHA1 1b003659b4d3bf5857ac328b37d0dd790ceed825
SHA512 3b5720bd547ebbfee9a37a80747ce7b53256a82c50180a7451618a5f3644e8a942d0f39f4de61f9641818f7e127dd55e961f77d00061e8ace847ef2db077faea
SSDEEP 1536:Yumvprt5iWIc8Obp8Dy9drEltd6Vt3nWvQoFQGeB/9WoIawoTvP9:vm9t5iWUEp82vQ0QaD9W3aPN
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 979aad0de3300aab058b9ba5f1f69d088caeda3621b084f6d0826759f3ba06c1
MD5 27f2c3c19bb3a09204ce4260454ce0e7
SHA1 7851bd647c5edab15ecebcecf43a7c9a1d3b719e
SHA512 5c6b00a7c41167337aef907f74f72eb93ec49e81ca90a21ecf73aad5b11b63bf3dae6d3ded742701403aadcc1b576bf3d2fdcf6e61a66d89877005b5d531648e
SSDEEP 3:MsEllllkEthXllkl2zEkl8M:/M/xT02zn8
MD5 SHA1 SHA512 SSDEEP

Submit Download