Analysis

  • max time kernel
    234s
  • max time network
    1199s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25-05-2024 13:44

General

  • Target

    miner 2.55555/miner 2.5/xmrig-6.21.3/pool_mine_example - Copy - Copy (16).cmd

  • Size

    1KB

  • MD5

    bd2d455c1f3b2040bee33f2dfa8fe8a3

  • SHA1

    14261b9c05af1f9a3ff7fdc160e997a82c586e9d

  • SHA256

    23e5b645cd60421248984a0cdcc5b5eac3b59a1279787faf50df9475f998b156

  • SHA512

    48d2825fb511f131d1165172721ce4288bb1632191425428bc2156e8c4fb9b38071f75b1048c25a4dd35d08c0d4def096f52ea7244273eb06177c531d51c6967

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 17 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\miner 2.55555\miner 2.5\xmrig-6.21.3\pool_mine_example - Copy - Copy (16).cmd"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Users\Admin\AppData\Local\Temp\miner 2.55555\miner 2.5\xmrig-6.21.3\xmrig.exe
      xmrig.exe -o xmr.2miners.com:2222 -u 435StpkeVHdcvMVhY4SQNdHusi7VaQSNkZqa1bABLLdS5wtNcPrkJNDHvquj4NXXwbJav1T7RGgybAUJvHLKWGmJAhse82k -p x
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      PID:1028
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
      2⤵
        PID:320
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=972 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:2
        2⤵
          PID:2564
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1488 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:8
          2⤵
            PID:2572
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1588 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:8
            2⤵
              PID:2648
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2296 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:1
              2⤵
                PID:828
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2304 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:1
                2⤵
                  PID:2864
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2000 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:2
                  2⤵
                    PID:528
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3864 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:1
                    2⤵
                      PID:2152
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3728 --field-trial-handle=1204,i,11007241417754906017,340488693901354255,131072 /prefetch:8
                      2⤵
                        PID:1244
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                      1⤵
                      • Enumerates system info in registry
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of WriteProcessMemory
                      PID:2884
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                        2⤵
                          PID:2400
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1140 --field-trial-handle=1292,i,5966101723780837969,4801410126083314063,131072 /prefetch:2
                          2⤵
                            PID:1428
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1484 --field-trial-handle=1292,i,5966101723780837969,4801410126083314063,131072 /prefetch:8
                            2⤵
                              PID:2996
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe"
                            1⤵
                            • Enumerates system info in registry
                            • Suspicious use of AdjustPrivilegeToken
                            • Suspicious use of WriteProcessMemory
                            PID:1748
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                              2⤵
                                PID:2132
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1196 --field-trial-handle=1300,i,9585753702689261174,7510372599726367911,131072 /prefetch:2
                                2⤵
                                  PID:1076
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1168 --field-trial-handle=1300,i,9585753702689261174,7510372599726367911,131072 /prefetch:8
                                  2⤵
                                    PID:944
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                  1⤵
                                  • Enumerates system info in registry
                                  • Suspicious use of WriteProcessMemory
                                  PID:924
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                                    2⤵
                                      PID:792
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1164 --field-trial-handle=1148,i,9390267826296089979,2913039470629760577,131072 /prefetch:2
                                      2⤵
                                        PID:2616
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1456 --field-trial-handle=1148,i,9390267826296089979,2913039470629760577,131072 /prefetch:8
                                        2⤵
                                          PID:3028
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                        1⤵
                                        • Enumerates system info in registry
                                        • Suspicious use of AdjustPrivilegeToken
                                        • Suspicious use of WriteProcessMemory
                                        PID:1628
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                                          2⤵
                                            PID:1260
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1200 --field-trial-handle=1320,i,3435458388903712389,11665657394882707704,131072 /prefetch:2
                                            2⤵
                                              PID:2324
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1488 --field-trial-handle=1320,i,3435458388903712389,11665657394882707704,131072 /prefetch:8
                                              2⤵
                                                PID:2848
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                              1⤵
                                              • Enumerates system info in registry
                                              • Suspicious use of AdjustPrivilegeToken
                                              • Suspicious use of WriteProcessMemory
                                              PID:2120
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                                                2⤵
                                                  PID:2860
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1164 --field-trial-handle=1088,i,13284320327028373814,10975483565206720941,131072 /prefetch:2
                                                  2⤵
                                                    PID:2544
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1480 --field-trial-handle=1088,i,13284320327028373814,10975483565206720941,131072 /prefetch:8
                                                    2⤵
                                                      PID:2492
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                    1⤵
                                                    • Enumerates system info in registry
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:1160
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                                                      2⤵
                                                        PID:3052
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1144 --field-trial-handle=1304,i,9219853928139821216,8972939188022902310,131072 /prefetch:2
                                                        2⤵
                                                          PID:1448
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1440 --field-trial-handle=1304,i,9219853928139821216,8972939188022902310,131072 /prefetch:8
                                                          2⤵
                                                            PID:484
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                          1⤵
                                                          • Enumerates system info in registry
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:2064
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xbc,0xc0,0xc4,0x90,0xc8,0x7fef6d29758,0x7fef6d29768,0x7fef6d29778
                                                            2⤵
                                                              PID:2960
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1132 --field-trial-handle=1116,i,4341286806591304122,4543966665467667357,131072 /prefetch:2
                                                              2⤵
                                                                PID:2448
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1116,i,4341286806591304122,4543966665467667357,131072 /prefetch:8
                                                                2⤵
                                                                  PID:2304
                                                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                1⤵
                                                                  PID:1520

                                                                Network

                                                                MITRE ATT&CK Enterprise v15

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

                                                                  Filesize

                                                                  68KB

                                                                  MD5

                                                                  29f65ba8e88c063813cc50a4ea544e93

                                                                  SHA1

                                                                  05a7040d5c127e68c25d81cc51271ffb8bef3568

                                                                  SHA256

                                                                  1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

                                                                  SHA512

                                                                  e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2c2b0f30-f2a6-4e1a-96aa-b18776fe22c0.tmp

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  e5f995c5fa2150f388bc6b99418e23ed

                                                                  SHA1

                                                                  3969a1c8814a79b4aac61fc56dab56db9157ac94

                                                                  SHA256

                                                                  ac91cf7df66f117313016aa40280ae9da651efc51dea6bd62912700752455c93

                                                                  SHA512

                                                                  4bf742bae2b54c8c0f4e4a37c31a6e030269688c2f14b017733f54b4f3e51fde1fe8de30ca8030c076013a29d1e9382b29e4f090075d151da52e8e3277b153fe

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\616d83fc-c83f-4737-b003-31581791f4e1.tmp

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  e617196cd5185960274291e52fdc4c14

                                                                  SHA1

                                                                  6bd339e6423fb5e8f120a9bba4d3d4754994e984

                                                                  SHA256

                                                                  984f2c397c078f3bc5e4fe59741e27004fb5498912894551b50249b2c6f7560b

                                                                  SHA512

                                                                  3dfb4869884d23d9f2dc54e43a75572a9b2493e19a73c7af45d82e970bea19c368f7169d99afe120ac31dcfe2b863fd94e44766ff3d9dece0cf42b02e97a3a86

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\71d8d7a8-dfd7-4504-971b-efdbeaba0ca3.tmp

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  d5b8343b46137579fba6d6ace559283a

                                                                  SHA1

                                                                  e4858c0e2566bf55b834a5f763821f5029d09409

                                                                  SHA256

                                                                  e64ad2ec5d1c483df6ad0ae6cd3a501d6e4d7601ee364cf72601df6845e7b29f

                                                                  SHA512

                                                                  2654431ebf212c66ecd34d962af8711d0ffe013d3d2ddf34bd718939f9c7e44fdf2c355f306c895f357c153e8023789111ccfb818146f8369fa58290408270fb

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                                                  Filesize

                                                                  40B

                                                                  MD5

                                                                  cc224701d3988dd5549f5d4adbf10fe4

                                                                  SHA1

                                                                  bf7837f102c82b785f087208d907c86f3de96bb4

                                                                  SHA256

                                                                  ab4b477c15da3d33fd048de6a07bc97f38cb55f647a7cbb9c39ccbe56e18cb21

                                                                  SHA512

                                                                  da48b8a59c7a8434d277f18dff52557066aea503d889b4c06a840e0412afc0732ad8958a95f5d14d92b7cbf503ae0d1a32c5da87027c5df69591e85a973724d9

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\000007.dbtmp

                                                                  Filesize

                                                                  16B

                                                                  MD5

                                                                  18e723571b00fb1694a3bad6c78e4054

                                                                  SHA1

                                                                  afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                                                  SHA256

                                                                  8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                                                  SHA512

                                                                  43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

                                                                  Filesize

                                                                  16B

                                                                  MD5

                                                                  aefd77f47fb84fae5ea194496b44c67a

                                                                  SHA1

                                                                  dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                                                  SHA256

                                                                  4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                                                  SHA512

                                                                  b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                                                                  Filesize

                                                                  264KB

                                                                  MD5

                                                                  f50f89a0a91564d0b8a211f8921aa7de

                                                                  SHA1

                                                                  112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                  SHA256

                                                                  b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                  SHA512

                                                                  bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                  Filesize

                                                                  182B

                                                                  MD5

                                                                  ed6cf7f1093ded4418375c0755e59c7e

                                                                  SHA1

                                                                  f02d8689a5894a7c312df91a1e0db1ea69785699

                                                                  SHA256

                                                                  a4ac6c3e013e12eaecfe1cf1741268283fce8cc6f7a58cde688c24ae3cfb678e

                                                                  SHA512

                                                                  89523d9e26be19e3ae3bfd76c373973a5e45b63d14eaab69c2cc84027b2dd30423d0c300ab99403d7933cb3fed4a4ab326b0035bcba794040ab7e6c1cec0cd10

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                                  Filesize

                                                                  378B

                                                                  MD5

                                                                  7d3e1392b184d4fbdc59edb0544d6e4b

                                                                  SHA1

                                                                  95fd7213c57d1bd4269f0d8acaca27b4d6cc82f6

                                                                  SHA256

                                                                  3a1ea06012751afbec0d0e0bcd7455cafc697c8aa56ae547347f0128f17ae82d

                                                                  SHA512

                                                                  d708f43f63ff674ce1b40d46e0d1d9e296bd66f89d1b934352e407ef449e417ea24d9c8bb8dcbaedba4a15430adcb00d619a7d19dba4bf1d275afee7c5fb3d4a

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  37e211d9583bf413f40750968e1bf842

                                                                  SHA1

                                                                  2bcab36927543f0da60e25fd513aa654c86c1d17

                                                                  SHA256

                                                                  091ea250f541ce2a60b74da280b58df47f23f6877aab0d111c437cedffb7cf17

                                                                  SHA512

                                                                  19ab2a37c3243dce89653f05fabf5fc2da90abfc191447a150e09fa1fd5d3fe1d57372774a0f3577aeb174eb7b1237432224a5cff628cbc908cc10580dd1014f

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                  Filesize

                                                                  5KB

                                                                  MD5

                                                                  b328a955c19ccda77a8d308237763a0c

                                                                  SHA1

                                                                  9d98391d28f857fe98909a113eef586e337b929f

                                                                  SHA256

                                                                  5a112aa2f8eee59d9149a033e12a445ae53198a0307cc54b2b988846cb4cf92c

                                                                  SHA512

                                                                  6930e72bde98af17376e1bec6c7bd8614b31dffdec9727a74e656673824b15d58adfcec81030107c9b69a7686598cb8767da86d508a45402ad8f0edc3670bd4e

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  0e6230e086ae3b397e282ed4f970a1d2

                                                                  SHA1

                                                                  704b840bf1064ddbc46daf00441df161c8c10da7

                                                                  SHA256

                                                                  6b15121ba42438077f9d900afb9972c5a9157f29b598e4f3604308eb42dc050e

                                                                  SHA512

                                                                  09d1d5fdb739c1985ae0d41c086924fc6a1d315072fc265a284ab3bb0d1222e6ec44f2fc9fcb913b3a34752c0f7a9241d1d0288ea5d19481cbe1bd49fa6fcd8e

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  55355308a69b5e5d9adf326d46feaf20

                                                                  SHA1

                                                                  45438a6ea4fbf85450c837925ce04dc688f3fcc8

                                                                  SHA256

                                                                  4944b00ce2cd687983c4db5aa6e08e934f7366e8208233fbd20309b95ab58a28

                                                                  SHA512

                                                                  e52a412e60bffaa41358b548d306e0c726dfce1c9b61814ad295d7885bd7e126b60febe7dd5a6a3ac6f4bb7f675f99afa6d4f18f11b037212d8716d5a92c6578

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  690f9740fb8f86660fae74aa7ce6a1b9

                                                                  SHA1

                                                                  a9d761a6aa7329c04fdb569cf394adcb566a4ed8

                                                                  SHA256

                                                                  8ddcd494e5534a0de01eca090ca554d567a911c90d82c568b1333eb11a3f8284

                                                                  SHA512

                                                                  3ca345fc9266e5c2268b87fa006016aedd4567fefac934feb36b698550de81bec7e483387011cb71d2f6a485ec4b2fe69e0857297daa94b0895f6dbf14a140a4

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  a8704f6dff80d82e2a191765d7726b8a

                                                                  SHA1

                                                                  bb96f09ce4d96ed8f1a5adc9dfc811b165cdb008

                                                                  SHA256

                                                                  70a6dd1809a154ea070b7a7ac6af1d00072d6d21cff73a1065959d1ba01f4cf8

                                                                  SHA512

                                                                  807925c47444cbcf6876788c57aca131831f772d65aed3d88350e6acebeb83978985a1273b00c2b58b2ff81f1c496fac4178e18bbed6fd5da7b2e2b1d87e4659

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  f563fd3517a30acfafed2802edbd3e80

                                                                  SHA1

                                                                  358e220bb058c55257b05588fc535ce57520bc81

                                                                  SHA256

                                                                  6f7e69237289f712804e32882fa92dd55bedbc8904ac6a81a826512fb11fb793

                                                                  SHA512

                                                                  b0bc60fdfe05f2c481212e47d43a12a2015a40d213c1d76d6cbefc5a529b5ad796897013abe11d73a651bb8d699841373749e8d1cdf305c51b684d0e2904ae7d

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  85B

                                                                  MD5

                                                                  0e16444393cd322124146935ab837ecc

                                                                  SHA1

                                                                  aa1a3e9571e3e067421d940601965220711f24ad

                                                                  SHA256

                                                                  1b5de2bf736e2bb182cf64bd8a72bbbd6538a9f33dc8020223b2257bad6f7d82

                                                                  SHA512

                                                                  26c461b0493c5e0f26aa196ce94c0c9ea5d892220ebe882af4bf2892469515e9b13056ef7ae0f9c429f45c14f334299ccffa5bab1547b3da0e2fce45131630a0

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  85B

                                                                  MD5

                                                                  465f0dba6b890fa4d893293f317091fd

                                                                  SHA1

                                                                  187af51c5b70e01580332f649f0d47fbc0022eae

                                                                  SHA256

                                                                  24697ec93fb8c3a93ff1e8f5ee368eaeb3adef1362b458f06e8915321165ed0e

                                                                  SHA512

                                                                  01b9ad2e79768b26786da9842667c3ec71c71e783336c69806bba2aaefdb61a8db9e3ab1918f51a2b496563960ddd08486c8c200d9fa21a520798fda4653dcbd

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  86B

                                                                  MD5

                                                                  f732dbed9289177d15e236d0f8f2ddd3

                                                                  SHA1

                                                                  53f822af51b014bc3d4b575865d9c3ef0e4debde

                                                                  SHA256

                                                                  2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93

                                                                  SHA512

                                                                  b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  85B

                                                                  MD5

                                                                  916d4f5f8e2c8885224d1575807f6676

                                                                  SHA1

                                                                  bdf182d48eb1c332d8438a30e19146ec1b5b1012

                                                                  SHA256

                                                                  35b72abbb267230a52eb2fe73a32485fbf6dab0e4dcb5a9f56a5b67ff476973e

                                                                  SHA512

                                                                  89fde148ce52b52c8bdd8f321cfad0cdcff6f265d3d5c722b577bc8d70e7e6baf4809c5a5d394fda20ffc8d3ddaf5ab3bd84e11dc0c9933dabe037180ede661d

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  86B

                                                                  MD5

                                                                  f2faa4e1ea88e988c5bb7728143171a9

                                                                  SHA1

                                                                  1535512a7d03c1645e081009014c3672044aafe7

                                                                  SHA256

                                                                  677ab8fda750c1d91ededcfc277eaa4e353d92b6c16978caa238582b51c2a90c

                                                                  SHA512

                                                                  1c3839d260d3ca6899ec3bfa948a5ae2effd050a003d2b0ec449912abc979fb72c8e872ce26ebd1fddd19b0ef47b0ff7f385ce88b28b22e15ea991cfd0c5b029

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  85B

                                                                  MD5

                                                                  87c52ff48cdeaf79ade3954dcbf3190c

                                                                  SHA1

                                                                  3ecce8219d939159abdaf5143e81164a5faff7c1

                                                                  SHA256

                                                                  2517ef015d6cfb31b81f43b6eb1d9fb5d8e055bbbfe7853c22021a1220961a44

                                                                  SHA512

                                                                  75fb36cab34b54cc5390b6ea9f8dd4eef9c71f6592e78e39a04e78746d465288510af14220c7ac25fb0633e9b873bf760912ca77e4483cd86f0b9e54ff50fb48

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

                                                                  Filesize

                                                                  85B

                                                                  MD5

                                                                  0c503b14c261149ef6e3721e1496cbbf

                                                                  SHA1

                                                                  f4d66ef27d1d106a9c6ba607c21ea478391fee8e

                                                                  SHA256

                                                                  baa81a0c65608894017d8f33fd9b772ec12c70b7ce8e656ca33a67d37e63fa3a

                                                                  SHA512

                                                                  9bdeaa1996863957f1f5b0d0a484450c06d94e06c45eddaa98f35070170298cc5bfa55081fbbc2d4f2230fc7ead2431a2dd7342851fc285d3b824e1dbe1de399

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\c8d2eb17-36b0-4122-81f6-ddf514ddb0b5.tmp

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  41d039e94f4cae45a9d0c5790398750b

                                                                  SHA1

                                                                  39b14b41d26440b60cd32c422931711e1d38abbf

                                                                  SHA256

                                                                  4b6b2b0c012daa30c76a80a206151d4687e36d04d5d00a66f9833019c2dc0a10

                                                                  SHA512

                                                                  a17a21da10e0fa99c3ebe2d3f8652e156f19a32991d45e8469966eadd34bfd7ddd4974107513b30297607be95b8798c1a1347b533096df43efe0a9d5812728db

                                                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e8ad7b57-67d3-46b9-b46c-e8faa578e7e9.tmp

                                                                  Filesize

                                                                  3KB

                                                                  MD5

                                                                  287c698375333323f3aade92ed76f4f9

                                                                  SHA1

                                                                  57545fb23acb9f4e65b219e27471e3f5a556ac30

                                                                  SHA256

                                                                  fa741a90f1a282e5c50120d23e6dc502ded259fa056addb88b51df7b93d2513e

                                                                  SHA512

                                                                  b70f4ab25123d1aab20685975bcbd107674dec1b5898adbe061c9ae6a77a05193ff5fdbd3792595af562be844b4b8302c1f11435c568f79592c91589610f02af

                                                                • C:\Users\Admin\AppData\Local\Temp\Tar121F.tmp

                                                                  Filesize

                                                                  177KB

                                                                  MD5

                                                                  435a9ac180383f9fa094131b173a2f7b

                                                                  SHA1

                                                                  76944ea657a9db94f9a4bef38f88c46ed4166983

                                                                  SHA256

                                                                  67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

                                                                  SHA512

                                                                  1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

                                                                • memory/1028-1-0x00000000005E0000-0x0000000000600000-memory.dmp

                                                                  Filesize

                                                                  128KB

                                                                • memory/1028-2-0x00000000021F0000-0x0000000002210000-memory.dmp

                                                                  Filesize

                                                                  128KB

                                                                • memory/1028-3-0x00000000005E0000-0x0000000000600000-memory.dmp

                                                                  Filesize

                                                                  128KB

                                                                • memory/1028-0-0x00000000000F0000-0x0000000000110000-memory.dmp

                                                                  Filesize

                                                                  128KB

                                                                • memory/1028-4-0x00000000021F0000-0x0000000002210000-memory.dmp

                                                                  Filesize

                                                                  128KB