Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13/05/2024, 19:14

General

  • Target

    http://www.google.com

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.google.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1048
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff86503ab58,0x7ff86503ab68,0x7ff86503ab78
      2⤵
        PID:3732
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1520 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:2
        2⤵
          PID:2684
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:8
          2⤵
            PID:3504
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2152 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:8
            2⤵
              PID:3736
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2932 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:1
              2⤵
                PID:3836
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2948 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:1
                2⤵
                  PID:664
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3920 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:1
                  2⤵
                    PID:1128
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1484 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:8
                    2⤵
                      PID:1284
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4412 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:8
                      2⤵
                        PID:1240
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=1456 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:1
                        2⤵
                          PID:4536
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4028 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:1
                          2⤵
                            PID:392
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3308 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:8
                            2⤵
                              PID:4556
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4748 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:8
                              2⤵
                                PID:5000
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4856 --field-trial-handle=1828,i,1766258347616976344,4639448611058264071,131072 /prefetch:2
                                2⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:2956
                            • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                              1⤵
                                PID:3340

                              Network

                              MITRE ATT&CK Enterprise v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

                                Filesize

                                54KB

                                MD5

                                b71722604e0ca0958a20b773980de0b4

                                SHA1

                                c5b09778ac473061a7d1ce470b15c6afd21c7180

                                SHA256

                                06a4ff3ed9b6c5d6219abd49124e716c51f4fde18dca3a8a48742e260c456634

                                SHA512

                                19cfacff5ef958d6347feafc6df7214064d8e4a2571b23108ccdf92ab9ab6a0baae169f1534f4b6c104d84b6cf3e0157f0815f7a73b5e2fd48130d4806d4bea1

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                1KB

                                MD5

                                7b6fd9c9d829f73da52735bd6f7102ae

                                SHA1

                                0ecb352019856fea4dbb174f06f91c2ad48cea77

                                SHA256

                                b8ecfd298151da6ec2c5db0dd3215c7c455c20d45f47bbb8294f36cc4d17a6e7

                                SHA512

                                200851d111fa2b0bd7a209624cad99549535c6509460a23180cf7f358348f549ceae981104d8f2e144417cf82c09386f3a917e01076c1749cfbb6ed6dcd07616

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                Filesize

                                216B

                                MD5

                                2f0fd1396a83091e15f1ec63a7f72dbb

                                SHA1

                                69962e2aceaabca49e99a82311d38ade86a34373

                                SHA256

                                1aa4d97901580346f821094ea35244c0d752b81b7eb61ea3df6e244d21996425

                                SHA512

                                1d36efbb2a6b0ad7d4ddba7a6bdbed7913ecb98c9de4a4a0da597c176922345d7563df47591785ab7018afb39e01c503822690e6d31258c00a7ecef9e98db736

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\index-dir\the-real-index

                                Filesize

                                264B

                                MD5

                                6986fd0802f9fea716d0d66ad58e5523

                                SHA1

                                cbd70273c4e857b909b39b76c9e9fcbf6ccf108a

                                SHA256

                                57ca677eee99cbf8c7ae66a0034447164a3d10218a9509b3050bd23b69c29e8a

                                SHA512

                                9a1dcb45798c8a5484556c6519439e46d1853df97b70871421d8e03abb6148b7cc5f61c642836b9ef1b402c3667c119288404d1e580449afb5d9a1e7a47cb7aa

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                Filesize

                                5KB

                                MD5

                                085bb213fc604fc38258a10e4229dd6c

                                SHA1

                                758ffe85a45e18a9cd53fd67de8708ff7537ef96

                                SHA256

                                c4336064239a4f757d502f88108dadffc4c36ce1157af1f612573b1089b79cd7

                                SHA512

                                81fad1fdb1c7266e6ae25e44861ddbc8e0b5497807b580ad9ebee2f13dc1ed0ecda9e87895e67099292d970e548e69e6df9363302f55e359d909e0a2d58b2923

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                Filesize

                                6KB

                                MD5

                                d90dd19eb583c1e94c675966370de5a9

                                SHA1

                                08edb440c4289ec64ac3c7bf25c6e36ebb0eba2d

                                SHA256

                                15a87c95a1bcefe74d04a48c3fa480827fec8f639d37942b785b8a778182ca8a

                                SHA512

                                f089403286b55d34e9f5f818b66085092b185d406e9d930a4dad066e5b8162db8519e8bd64ae83b35caecf4a507677bcd9f6de7996f68a7fa7c647563d65b4bb

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                Filesize

                                2B

                                MD5

                                d751713988987e9331980363e24189ce

                                SHA1

                                97d170e1550eee4afc0af065b78cda302a97674c

                                SHA256

                                4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                SHA512

                                b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                511B

                                MD5

                                a426301bf2d39f4260e6f8b991d1eee8

                                SHA1

                                0bb29c79bfe3bc78a3cb936e65afa63a04923978

                                SHA256

                                9f995944b97b558dcf077e5282107552042702d1bc25f07ca7401a70ce73d6e3

                                SHA512

                                1411949f190558bc59bcaefd541ab8999346db06d03b902ef7957b957fd96982e0d1649b95318e028d7262ddbc45edeb5cf8610217ff5fa41832b1f319f94745

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                837B

                                MD5

                                b486d23a1c2c92baccb58e24fdb5681c

                                SHA1

                                fee2c41d11e1fd9976b6f6e3d6d5dec6a1913b47

                                SHA256

                                1b5758bebbbb24885dd93b7d4afb6041808eb3d1cb9e9aa184d129b329533457

                                SHA512

                                00c4863eece27c18d778abe1a3b35c76027e903ee4c5697feb10fd42d67c9b6b8646af1be5d3a62a5a35245fdc619f843142ad09c8200629c9b0e81c743c7943

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                841B

                                MD5

                                ee33c7d21f7f2c51b81b21b0c76800a6

                                SHA1

                                dee307a6a66b51adb8532ce820684e5c54497366

                                SHA256

                                0d9ea9ad20fdf90e71b210f9495afd64ba47e6f0b17a307b7a695c636d64aa95

                                SHA512

                                a098ec4091896a2b798a6534a17d83f93b6cf915f897f813a4415e295302e01d5e99ba057aeb3e7f4751fe9f671151fff5845b29c3128c945d9c6458495f540a

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                841B

                                MD5

                                fdfba0d78d72f321f3a16e881e1a1dda

                                SHA1

                                31fd2d3de8f1db5f6d0eaabcb56dd922699b7a47

                                SHA256

                                385ab7b0beacfb967cdd35b90c7882005de248d87f008d330ad255c74c894638

                                SHA512

                                ec3d98531558d4295ec0a483c050991be0f4dc3eca5eee4f1a0d3ba51f39263760dffcae3463272dcbb7b99b424fc2af911ac95a81c5f78cf1fa0336b33917b5

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                841B

                                MD5

                                59df2fc9b00263cdecdf99065815ed40

                                SHA1

                                2806450434405ef2f6578c578033c179173d3fb6

                                SHA256

                                dd3612aa3d7a9f292ba5f6ce852fce4a3321013affc538fb345161ed2fc39f6d

                                SHA512

                                cb3ef36c54fc19f37fbb2bed0f850480530e396fa649afd981aeb4ecc617293bd6df27116982dfeb4e89318044bf14aaf0f977d77df3cfe95304b3b12563061a

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                352B

                                MD5

                                b8c24cf3bb2ba804d40d2b9a5df17a29

                                SHA1

                                9bf10439379c77c70de8e9df55553d5f27489ac3

                                SHA256

                                7b7904be6239e2258d2b9382b0dc01aba49eeeb9aff7c81697d720382e1fb222

                                SHA512

                                3c24a8a785146eb5297c0ad05c7916ecec66d93cc87f116e089e5f2d4492b42608f634e117c640896872077f619bb1a7ecb6fd0a55c965101e07e05286f1eeb4

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                841B

                                MD5

                                ab81d32a71367c51c836ede61a04d322

                                SHA1

                                58fc257ad4928b58c1d4574034babbeebf8c7627

                                SHA256

                                d8b7c752dd7b9855b18a1d8a9087c84b7626421cd0586370c141943b02f14b48

                                SHA512

                                d34433b3864d85fdacea5dc6d926cb4e5830d5b8c76b7e8005b502eab389f9f01b59e355e1e019c2ef2dbcae99846a2093deaaa55d5ec503e793e2cfbab64be4

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                845B

                                MD5

                                895e2793c2dcc4157ee024e6b617a488

                                SHA1

                                a31a51163cdcee552c93c837cebaac2d4435a069

                                SHA256

                                a85d779aef6ac102d3a78192b3cc383ad71575deb8713781c0064b89145e48f9

                                SHA512

                                90f0aca0e16f6640b27fc0470b55d7c724fae646edab9e9b6098e81e275585539e5095811d82db5de5077295f40fcff3e9270fd056114fa2fa88b7289608a6ec

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                7KB

                                MD5

                                f48a00e20a12d4cf179aa03dd1cc984c

                                SHA1

                                c763d25b15db0d7020e1b52639720b4be82597b1

                                SHA256

                                b0ddb0141646926eae6e9ec54a3a969e8f746bdb00aa11a66fe87ba2612d9b72

                                SHA512

                                282adb56e167dae33b64cd63af1a1a1db9017f66a9a23e631d11dfeaf8a7ea3d0bd092e6beaf1884199e9937d0bfcac6ad45826b70967ee5263379ac6cf59d75

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                7KB

                                MD5

                                d73d11648a775603cf2d91810dfc18c1

                                SHA1

                                f3c96e27e77be8700afd30cb8291392f0fd96620

                                SHA256

                                cda03e0278e2ec82e092d3f06d7fa3fd28c6172b3f298c45b68495aded6e0178

                                SHA512

                                5af1c6190460593249d33cbde0dd30b2fc75d39bd9b85b025feccac22b826bd77de7056bc68b7ecca9cc163a77b5f3f7cb7bf56888435be1be6f896875b7796c

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                7KB

                                MD5

                                c081c9f848ba338dc1a9a3d34201aaee

                                SHA1

                                beea88e09dd733e268628798dca9ec7b93b053f8

                                SHA256

                                5293f8e30ea9a155fb17c57478c693003057bb29ceb158367a32690a3acc6138

                                SHA512

                                052e1c1b4b0cae3f909ef73e02cbacb9db7c794c83f3e08b52ab9cea46618b6f799fc99bd2aa19482bda98d94ef300da97ca125be89ba08aff460537535fd45d

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                Filesize

                                130KB

                                MD5

                                76b6184aa80ecc413f53f7043e13ab1e

                                SHA1

                                a4eab16a76053c5dcbb99e2f30f1ee566896a32e

                                SHA256

                                f19d9878e4c16e52e6c6915b596e55760513d6343d0d711fdddb8244f256f5fd

                                SHA512

                                76b8027e646d732dec766d03d4fff7d64d2971fa87821ef53071777953a8218987ab69fdb65d42d8a30d2bbf6cea4368ebc175ca7f654f481f0a4d1b124228ce

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                Filesize

                                130KB

                                MD5

                                6f845c43924f6302d1da3bde5a1cdd7a

                                SHA1

                                6ed30b4de0628ef1f78b0d327f8a5e2a15cc13ca

                                SHA256

                                90ff58db4cab5c2efd8956ad9d428d43a28d3e201a0d0a2a6a64bcfacf7eed93

                                SHA512

                                144ebea1045f034807cc9dd780bf27a2325fd274dfbab907999337f13b9d6b4bff5e58d2df76d5f5cfad044144a7cf9187d313e0073257d5768ba191622e23db