Malware Analysis Report

2024-10-10 07:17

Sample ID 240611-rv298s1blr
Target https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D
Tags
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

Threat Level: Shows suspicious behavior

The file https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D was found to be: Shows suspicious behavior.

Malicious Activity Summary


Legitimate hosting services abused for malware hosting/C2

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-11 14:31

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-11 14:31

Reported

2024-06-11 14:34

Platform

win10-20240404-en

Max time kernel

149s

Max time network

150s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A yandex.com N/A N/A
N/A yandex.com N/A N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133625899502691098" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1448 wrote to memory of 2304 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 2304 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 4256 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 3060 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 3060 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 1448 wrote to memory of 988 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffeab689758,0x7ffeab689768,0x7ffeab689778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1532 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1784 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1884 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2964 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3092 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4440 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4468 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5012 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5884 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5604 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1644 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4524 --field-trial-handle=1848,i,240373219927738738,4009528977855573470,131072 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 link.mail.beehiiv.com udp
US 104.18.69.40:443 link.mail.beehiiv.com tcp
US 8.8.8.8:53 shop.nunepufa.ru udp
US 104.21.94.110:443 shop.nunepufa.ru tcp
US 8.8.8.8:53 40.69.18.104.in-addr.arpa udp
US 8.8.8.8:53 145.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 110.94.21.104.in-addr.arpa udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 151.101.2.137:443 code.jquery.com tcp
US 104.17.2.184:443 challenges.cloudflare.com tcp
US 104.17.2.184:443 challenges.cloudflare.com udp
US 8.8.8.8:53 c0aih.p9j32.com udp
US 104.21.94.110:443 shop.nunepufa.ru udp
US 104.21.36.2:443 c0aih.p9j32.com tcp
US 8.8.8.8:53 137.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 184.2.17.104.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 www.alibaba.com udp
US 8.8.8.8:53 2.36.21.104.in-addr.arpa udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
BE 104.68.85.25:443 www.alibaba.com tcp
BE 104.68.85.25:443 www.alibaba.com tcp
US 8.8.8.8:53 s.alicdn.com udp
US 8.8.8.8:53 g.alicdn.com udp
US 8.8.8.8:53 assets.alicdn.com udp
US 8.8.8.8:53 25.85.68.104.in-addr.arpa udp
BE 104.68.85.7:443 assets.alicdn.com tcp
US 163.181.154.230:443 g.alicdn.com tcp
US 8.8.8.8:53 insights.alibaba.com udp
BE 104.68.85.25:443 insights.alibaba.com tcp
BE 104.68.85.25:443 insights.alibaba.com tcp
US 8.8.8.8:53 sale.alibaba.com udp
BE 104.68.85.25:443 sale.alibaba.com tcp
BE 104.68.85.25:443 sale.alibaba.com tcp
BE 104.68.85.25:443 sale.alibaba.com udp
BE 104.68.85.25:443 sale.alibaba.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 aeis.alicdn.com udp
US 8.8.8.8:53 marketing.alibaba.com udp
US 8.8.8.8:53 i.alicdn.com udp
US 8.8.8.8:53 open-s.alibaba.com udp
US 8.8.8.8:53 onetalk.alibaba.com udp
US 8.8.8.8:53 passport.alibaba.com udp
US 8.8.8.8:53 tradeassurance.alibaba.com udp
US 8.8.8.8:53 ug.alibaba.com udp
GB 216.58.201.106:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 7.85.68.104.in-addr.arpa udp
US 8.8.8.8:53 230.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 buyercentral.alibaba.com udp
US 8.8.8.8:53 gj.mmstat.com udp
BE 104.68.85.7:443 i.alicdn.com tcp
US 163.181.154.235:443 buyercentral.alibaba.com tcp
US 47.246.131.60:443 open-s.alibaba.com tcp
US 47.246.131.60:443 open-s.alibaba.com tcp
US 47.246.131.60:443 open-s.alibaba.com tcp
US 47.246.131.60:443 open-s.alibaba.com tcp
US 47.246.136.160:443 gj.mmstat.com tcp
US 47.246.136.160:443 gj.mmstat.com tcp
US 47.246.136.160:443 gj.mmstat.com tcp
US 47.246.136.160:443 gj.mmstat.com tcp
US 47.246.136.160:443 gj.mmstat.com tcp
US 47.246.136.160:443 gj.mmstat.com tcp
US 8.8.8.8:53 rule.alibaba.com udp
US 8.8.8.8:53 activity.alibaba.com udp
US 8.8.8.8:53 app.alibaba.com udp
US 47.246.131.189:443 marketing.alibaba.com tcp
US 8.8.8.8:53 fourier.taobao.com udp
US 47.246.131.135:443 ug.alibaba.com tcp
US 47.246.131.135:443 ug.alibaba.com tcp
US 8.8.8.8:53 buyer.alibaba.com udp
US 47.246.131.189:443 marketing.alibaba.com tcp
US 8.8.8.8:53 us.ynuf.aliapp.org udp
US 8.8.8.8:53 235.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 60.131.246.47.in-addr.arpa udp
US 8.8.8.8:53 160.136.246.47.in-addr.arpa udp
US 8.8.8.8:53 189.131.246.47.in-addr.arpa udp
US 8.8.8.8:53 135.131.246.47.in-addr.arpa udp
US 8.8.8.8:53 inspection.alibaba.com udp
US 47.246.131.135:443 buyer.alibaba.com udp
US 8.8.8.8:53 ipp.aidcgroup.net udp
DE 47.246.146.52:443 us.ynuf.aliapp.org tcp
US 8.8.8.8:53 itunes.apple.com udp
US 8.8.8.8:53 logistics.alibaba.com udp
CN 123.183.232.34:443 fourier.taobao.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 my-health.alibaba.com udp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 partner.alibaba.com udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 reads.alibaba.com udp
US 8.8.8.8:53 seller.alibaba.com udp
US 8.8.8.8:53 service.alibaba.com udp
US 8.8.8.8:53 52.146.246.47.in-addr.arpa udp
US 8.8.8.8:53 supplier.alibaba.com udp
US 163.181.154.235:443 buyercentral.alibaba.com udp
US 8.8.8.8:53 activities.alibaba.com udp
US 8.8.8.8:53 ai.alimebot.alibaba.com udp
US 8.8.8.8:53 apps.apple.com udp
US 8.8.8.8:53 img.alicdn.com udp
US 8.8.8.8:53 www.lazada.com udp
US 8.8.8.8:53 www.linkedin.com udp
US 8.8.8.8:53 www.tiktok.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 baba-blog.com udp
US 8.8.8.8:53 biz.alibaba.com udp
US 8.8.8.8:53 g-sellercenter.taobao.com udp
US 163.181.154.230:443 img.alicdn.com tcp
US 163.181.154.230:443 img.alicdn.com tcp
US 8.8.8.8:53 global.alipay.com udp
US 8.8.8.8:53 i.alibaba.com udp
US 8.8.8.8:53 rfq.alibaba.com udp
US 8.8.8.8:53 rulechannel.alibaba.com udp
US 8.8.8.8:53 survey.alibaba.com udp
US 8.8.8.8:53 talent.alibaba.com udp
US 8.8.8.8:53 twitter.com udp
US 8.8.8.8:53 world.taobao.com udp
US 8.8.8.8:53 www.1688.com udp
US 8.8.8.8:53 www.alibabagroup.com udp
US 8.8.8.8:53 www.aliexpress.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.instagram.com udp
US 8.8.8.8:53 air.alibaba.com udp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 px-intl.ucweb.com udp
US 157.185.188.1:443 px-intl.ucweb.com tcp
US 157.185.188.1:443 px-intl.ucweb.com tcp
US 8.8.8.8:53 offer.alibaba.com udp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 baize.alibaba.com udp
US 8.8.8.8:53 1.188.185.157.in-addr.arpa udp
US 163.181.154.237:443 offer.alibaba.com tcp
US 47.246.131.93:443 baize.alibaba.com tcp
US 8.8.8.8:53 tags.creativecdn.com udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 mc.yandex.ru udp
US 8.8.8.8:53 connect.facebook.net udp
US 47.246.131.93:443 baize.alibaba.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 195.181.164.16:443 tags.creativecdn.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
RU 93.158.134.119:443 mc.yandex.ru tcp
US 8.8.8.8:53 asia.creativecdn.com udp
SG 103.132.192.30:443 asia.creativecdn.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 gum.criteo.com udp
GB 163.70.151.21:443 connect.facebook.net udp
NL 178.250.1.11:443 gum.criteo.com tcp
SG 103.132.192.30:443 asia.creativecdn.com tcp
US 8.8.8.8:53 237.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 93.131.246.47.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 16.164.181.195.in-addr.arpa udp
US 8.8.8.8:53 119.134.158.93.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 30.192.132.103.in-addr.arpa udp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 mc.yandex.com udp
US 8.8.8.8:53 sslwidget.criteo.com udp
NL 178.250.1.9:443 sslwidget.criteo.com tcp
US 8.8.8.8:53 yandex.com udp
RU 5.255.255.5:443 yandex.com tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
US 8.8.8.8:53 sync-t1.taboola.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 8.8.8.8:53 r.casalemedia.com udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 ad.360yield.com udp
US 8.8.8.8:53 matching.ivitrack.com udp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 34.117.157.22:443 matching.ivitrack.com tcp
US 104.18.36.155:443 r.casalemedia.com tcp
GB 142.250.180.2:443 cm.g.doubleclick.net tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 dpm.demdex.net udp
NL 89.149.193.88:443 rtb-csync.smartadserver.com tcp
NL 141.226.228.48:443 sync-t1.taboola.com tcp
DE 162.19.138.83:443 id5-sync.com tcp
IE 54.74.225.146:443 ad.360yield.com tcp
SG 103.132.192.30:443 asia.creativecdn.com tcp
IE 52.50.127.192:443 dpm.demdex.net tcp
US 8.8.8.8:53 apps.identrust.com udp
US 8.8.8.8:53 contextual.media.net udp
US 8.8.8.8:53 exchange.mediavine.com udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 sync.outbrain.com udp
NL 23.63.101.152:80 apps.identrust.com tcp
US 8.8.8.8:53 simage2.pubmatic.com udp
DE 18.194.130.148:443 exchange.mediavine.com tcp
IE 34.255.106.93:443 jadserve.postrelease.com tcp
BE 92.123.50.49:443 contextual.media.net tcp
US 64.74.236.159:443 sync.outbrain.com tcp
US 8.8.8.8:53 cashier.alibaba.com udp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
SG 103.132.192.30:443 asia.creativecdn.com tcp
US 8.8.8.8:53 lang.alicdn.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 criteo-sync.teads.tv udp
US 8.8.8.8:53 criteo-partners.tremorhub.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
DE 3.120.213.138:443 match.sharethrough.com tcp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 5.255.255.5.in-addr.arpa udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 22.157.117.34.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 88.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 48.228.226.141.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 146.225.74.54.in-addr.arpa udp
US 8.8.8.8:53 192.127.50.52.in-addr.arpa udp
US 8.8.8.8:53 152.101.63.23.in-addr.arpa udp
US 8.8.8.8:53 148.130.194.18.in-addr.arpa udp
US 8.8.8.8:53 93.106.255.34.in-addr.arpa udp
US 8.8.8.8:53 49.50.123.92.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 54.84.171.179:443 criteo-partners.tremorhub.com tcp
US 8.8.8.8:53 37.82.161.3.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 159.236.74.64.in-addr.arpa udp
GB 23.36.249.37:443 criteo-sync.teads.tv tcp
US 8.8.8.8:53 eb2.3lift.com udp
BE 104.68.85.25:443 lang.alicdn.com tcp
US 163.181.154.230:443 img.alicdn.com tcp
US 163.181.154.230:443 img.alicdn.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 ad.yieldlab.net udp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 8.8.8.8:53 sync-criteo.ads.yieldmo.com udp
GB 23.36.249.192:443 ad.yieldlab.net tcp
US 8.8.8.8:53 gm.mmstat.com udp
US 8.8.8.8:53 e1.emxdgt.com udp
US 8.8.8.8:53 c1.adform.net udp
IE 52.209.229.240:443 sync-criteo.ads.yieldmo.com tcp
US 163.181.154.234:443 cashier.alibaba.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
DE 3.76.127.247:443 e1.emxdgt.com tcp
CN 123.183.232.34:443 fourier.taobao.com tcp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 138.213.120.3.in-addr.arpa udp
US 8.8.8.8:53 37.249.36.23.in-addr.arpa udp
US 8.8.8.8:53 179.171.84.54.in-addr.arpa udp
US 8.8.8.8:53 18.111.223.76.in-addr.arpa udp
US 8.8.8.8:53 192.249.36.23.in-addr.arpa udp
US 8.8.8.8:53 234.154.181.163.in-addr.arpa udp
US 8.8.8.8:53 240.229.209.52.in-addr.arpa udp
US 8.8.8.8:53 247.127.76.3.in-addr.arpa udp
US 8.8.8.8:53 233.6.157.37.in-addr.arpa udp
CN 59.82.33.226:443 gm.mmstat.com tcp
CN 59.82.33.226:443 gm.mmstat.com tcp
US 8.8.8.8:53 core.yads.tech udp
US 8.8.8.8:53 an.yandex.ru udp
US 44.212.184.75:443 core.yads.tech tcp
RU 213.180.193.90:443 an.yandex.ru tcp
RU 213.180.193.90:443 an.yandex.ru tcp
US 8.8.8.8:53 sync.sharethis.com udp
IE 34.242.254.5:443 sync.sharethis.com tcp
US 8.8.8.8:53 gw-iad-bid.ymmobi.com udp
GB 142.250.180.2:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 75.184.212.44.in-addr.arpa udp
US 8.8.8.8:53 90.193.180.213.in-addr.arpa udp
US 8.8.8.8:53 5.254.242.34.in-addr.arpa udp
US 104.18.36.155:443 r.casalemedia.com udp
US 47.253.61.56:443 gw-iad-bid.ymmobi.com tcp
US 8.8.8.8:53 t.adx.opera.com udp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 cm.adform.net udp
DK 37.157.2.230:443 cm.adform.net tcp
US 8.8.8.8:53 yandex.ru udp
RU 77.88.44.55:443 yandex.ru tcp
US 8.8.8.8:53 56.61.253.47.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 230.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 55.44.88.77.in-addr.arpa udp
US 8.8.8.8:53 csm.nl3.eu.criteo.net udp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 8.8.8.8:53 25.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 23.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 27.173.189.20.in-addr.arpa udp

Files

\??\pipe\crashpad_1448_ULZCXEUYOSJKOYWZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 f59c28a9e18ce61bccf99c76d8715f72
SHA1 ac895e7cb3a4b98e6eed9508c6d56e5f3305a683
SHA256 dd3e8edd4a96531b195bc6692514914208dcdfaade9c6b7c625cafae9b975ef3
SHA512 5e5a4a2927ca4b8a77100eec4fe2d9dbbb5f11c454e64ef498e38201c95b5609ba0feb52014af11344bac5bd3fd650f1b05605eb353e1e3bd16d43eaa84b4e83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a406fb40074c28e730d6a9dd0da841e8
SHA1 f7d4453ead6b073aead5742e493b8289d6d342c8
SHA256 9a765ece0748a453da5724f2cbda92d5e3802eb686ef0e5e335f294bf6c86938
SHA512 c2754b1395509dbc6da0d922aac36f316a8622fce2768afa5d831405c2d26bc1f109c8a15244e1a300f64da14755b683c2863356551a5f80ccf2aaf828e5d4fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5b02846cb58660f6a64765815a9a17c7
SHA1 16e3fcb3b0e6cb9adcc46d32124714b88786b711
SHA256 937b4d9ff624886f5efd6bdd5cd34f9aa039fe7766373646165ca1b141ba3cff
SHA512 e24563990cd46553f53442fbfe933e040db6355ef3a40dc169c81e2c0639cb8bef937f797aa19bb5909464eca4dec005bf11a500cee05403158f57d49ab43da5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e791c15ec41c72238fea82589436123e
SHA1 8a93704b2df1a686e2d1b2adf5c9c03f24fc193c
SHA256 00629425e26e3172f9f01099d2cab8d627cdc707ed12e6d79a8d67913dcfa453
SHA512 8989f569fb6489208767397a68dae35ba9a1cd01db925db545125ccc5c9fb25d9d09a9846c976c65523881792d8c97b910ef70ee34afba5ca05aba96cbe30417

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5 008d0ae10f41631bb124d78799baf5bb
SHA1 cd5956db2574b3e718d8e87f3e4af79e2a3b5e0b
SHA256 a0aee1664677fce87357ff299c236f12803be313c1838a312d779ccf1ce0e590
SHA512 e4c1c5a8d88b6e0caa60b3c6ce02c05b0b2653c478a788d9d6c330d34439a5f91acecd67dc6baa4f40cf8f4cf21a684a13162562df8e2406cd06ac3145c6216e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

MD5 c456292ed9ca472fab6844e7b32f1b9c
SHA1 83be6dc73cae7814a206ad60f82df127d45ce570
SHA256 e8033df26e47ab9825b6d1478654fb78f0780d65ba72321d9296246cf5fb2b59
SHA512 4a0391be5f330ff42cb876bd51234441f0ebffcccf05690c8868de62c0598cc727c3266b9cb2959af89f2b44b4559a17e1d223b9a08f587019262477260d776f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0ac23270b150cc4ad1fee868469da081
SHA1 bababa5d4afe04018d7f3fa8c74bdead6f4d82e9
SHA256 967a9c1ecb6342162e22597ce8dffdcdf1be51d4e0e2c3802535a1024e93c596
SHA512 bd7683729742536a9a41d6f8264e07c6d855ddd75fa4418163c3217f2a52298209281da41abc48e4612ee845f66bddbf103893bf9596e85bfe0839c01d2981ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 60265885b318ea01bad0f7d4311efa07
SHA1 168ecfac91f14c5066ec5783771b4ffa18077cc2
SHA256 24bbe63401a55ce79e2f003c686e314cae0d13087767fe0d151226bf61377cf0
SHA512 600fb428135ece6fc563ba804335c50bb1f2dcc29dc17212a6f941b462661723bb96da35b7e521d20cf6878bfd9958a6c6affcc1da5d0bc3661ca9857b0213d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58292e.TMP

MD5 8e88e3b33e71aa0b945df7b6278dc22b
SHA1 ffd9ed4d66cf0869d2bc64c6084a0ee4c3ea9dcb
SHA256 94647aa78d078b041db93436d5cd89a05ff8147c61a924bde57a1007258dd173
SHA512 c4825c9be99b2ca95701934ad242e8be8763b576ca16bc14af9be3f044131a3786f31c455ea448fb3fa0c8af8bb2a6559586534283554d2ae3dce0414e50317a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 e7db0ba008883f8ada145adb9e60d24e
SHA1 d132f7392a69c216bff9ad581e7801164dffc1f2
SHA256 fc9642c5eeccc2b36560c84f7b9680b83329cb836bd8703293b1b27c66396402
SHA512 65381bdc08f3cb532070a4d0d71863bd17f2ab90dc1b0de5be9584edc770de862a7e4d4871a8893047c09484c8a7dc2907887c446fd233f0eb6cccfabd24600c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1bd21f8d4b69128c751b04b116af5acd
SHA1 02c61b237c45a7028c57834ce70256fb190eec5f
SHA256 4f6f08eae943b42303bf65ddd62ea8baa0a4220e3e6d6a580a974083bcc5b400
SHA512 a2525060232dde58358c8e6667d805fb82b3228c62f9d2f2e0d4162c9ea6ab34d787be8a301f1ee9ffd866e0a115527aa080794b858fbed4c8010ade5976ef4f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e3ece7ac1d748bd8cf130a6dd1fa386ea15cfca\a1016c7b-e60c-40c8-986e-428fbb519962\index-dir\the-real-index~RFe582b41.TMP

MD5 01a7ceed4129c0e28f765cf45071d15c
SHA1 dee2a37e8cfe2c4f8a7b4154efc431af45e293f9
SHA256 f6d4a3ccda05748ca2fd12342187429e256449da893b7bb3d3ce16c404c71235
SHA512 93f40bcbf7357552bd286017917c38bf71a097363fd2b22239cdb2ccb160d9d495f2b02fa5150eca0f9453c72717d8595edc0f62422efda4874182a389d25e3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e3ece7ac1d748bd8cf130a6dd1fa386ea15cfca\a1016c7b-e60c-40c8-986e-428fbb519962\index-dir\the-real-index

MD5 959958ad8837f8873ceecad74518f782
SHA1 ef1017ff73f6d2b5ca7986a82061bac50d235156
SHA256 b5874de70fe35b964752780ea40e3a47cce86891b726c540c60603af4fc100a5
SHA512 cf0fd22099f3d7e1e8b2ec77a490b9387256126169f96622ab514f1325d31ce95e8f3d789060a2b80a3ec4874c1cc9ca8cc7ef35697d978cfa8fd99d44c4ac58

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e3ece7ac1d748bd8cf130a6dd1fa386ea15cfca\index.txt

MD5 0535d901e099b0e725b7d5c3c45eeadf
SHA1 a8cb36098b11d4049a7487549020170f37b082d8
SHA256 51ef54fa0263b288c62e6cd47570a9928d357435de4e2b8c34b8d5a984c943b2
SHA512 950823986429234da2ea162456152d07b7ca80f2c1752d50965a8f2979a1984b6baec778d4e8dcc3e79a083514650d84b602272b1d86a5001ee78f212d1391c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e3ece7ac1d748bd8cf130a6dd1fa386ea15cfca\index.txt~RFe582b80.TMP

MD5 41b0c97c05a86be99f597e628b70d333
SHA1 a0ffc4745379938699af96aaa593f26857d940cf
SHA256 dabd451370de9700eba93d58064985c9a8b6037b294b38b56117b5343aab91cf
SHA512 e6433dba202858dbf77aec70c6c38af0b08fce4880637e81bdc7241ebbb9e8c4edff0291746e7c94eb1bce786c74de6a8c6b84acf022d655324d719b918b54a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\be35666cd73d55aaaf8ad83d8bbbe8d1cf6fb2c0\88bab4b9-5f4b-4559-8100-89cfdd150265\index-dir\the-real-index

MD5 b83d451ad5756233d508ca376ebb533c
SHA1 2983b8a8dcaf820a3cd773a09229b016ceabcd43
SHA256 7e1fdde8b39140555e931a4fb28bf5bcc45ec666d34e396fdf3ec5236e26cfc7
SHA512 bd4f7b0ae8659644279a311874139f0b59169865229121882c397c29a2d373e03cc82d4876c2f509e23b36975e6e48ce9d66cdf1a497b99d047a3c4c30b8e085

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\be35666cd73d55aaaf8ad83d8bbbe8d1cf6fb2c0\88bab4b9-5f4b-4559-8100-89cfdd150265\index-dir\the-real-index~RFe582c99.TMP

MD5 d60c407a4b02044663e965afbd58391a
SHA1 1b8782944714001361e3e6bc91e443484615eb87
SHA256 0c199342b8612cfbc9f864c2192d3c06c96624e0a14379a2e2229f7a5bd2e956
SHA512 b08a3e8ca22c9835a382cfcb6cac068b4b10328324cec35495380c9bf7b517e87950ff5921150133a38070bfe015c5fc6de1c60e545ebdb79716ea3f0668489d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\be35666cd73d55aaaf8ad83d8bbbe8d1cf6fb2c0\index.txt

MD5 0b55f3c815ee502cceecf1848e58e038
SHA1 0aac235a7babc8921b851ec469529e3432ebe128
SHA256 06ba2753d643122eabc1a69131dc2d7336c2535e58c9fa7d6a15540b30086d3c
SHA512 a711153b2d6663b829264a20d3125161ecdcd58d5cb2a5130e8eba2b6519ac1313faa0c6427f657b561e74a7c601ebd8fb38e2ead068a04c21bdb196a9d4eef8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\be35666cd73d55aaaf8ad83d8bbbe8d1cf6fb2c0\index.txt~RFe582cd7.TMP

MD5 956ee62cf06033deb60dbaec0fdc1da6
SHA1 58135b0f9ead1d3364a4873c5e8274b66c7cbf83
SHA256 103e312e9475703dc49ea57b6f68f6a53033176f16b80996c51deb69844470c5
SHA512 6ccb5c625aea5fb7eadbfaf384b724ed535a21478e3fc6f571f9dfaac24e378b97a758132936f29ddbaa554275a10b6a8dca132aa0958d41dfaf44e1c5028d63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 97ef63277593e43a2f9b299b00fb85ca
SHA1 acd70e51196039eb8eb24ff622ec180add9558e0
SHA256 eef1b89face36b62d07ceb095d00770db3e931c867d5c642cfcc2c90719161fd
SHA512 9a7dd97bef7dd43588a3796d29a7ac5412d68246851f6494d7fd228ce233ea86603200fc31aeced0a4faa2185b5610cd0e01cafb779b384acb8e75f677b842eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8726884c1f0d9b4a8ef8790e4947163f
SHA1 1a57731057ddd77f1a9cf097bdbbd6aebdf0610b
SHA256 9f215582302ecfa106586176eb4949ef70007f2cd2f2c212abc486fd7daab4f1
SHA512 32e59e9c6a1a039c3fbfb46b9d5916e17bd4b2a03651dc87197f313462f7a59d6407a6df0591d1d94a4b4a10f8a5ea6a8a941c856d61e15e34e2f55c063c08a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 edd07b534a07a6a5057eb0e947a43d10
SHA1 7804f68435fbc33054fdc4a854cf94b4148656b7
SHA256 6d221f0fe602cc96de0849bd0535e0aa46b642af516712c4fd3bf089333f222d
SHA512 0d9f03df13c4c1138f4cc1bd45c154ed4a45b736caaef356b5999c1c09294ad9c5ac1f4cb9d2fd454a6b4516ae56393015f8825c59d1a1f7a0ed3e7cc4a87571

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 88c598000f2c73a6d7678bfc7b1609ed
SHA1 8c33c464110043e4963d1a536e2e9f453dee9f50
SHA256 aa1af8cdad886f751dc09dd6448d57d43c82e060a0f394fdc2229107a40412b5
SHA512 a1be8e46526cd5694db8794693f1cc8b9d56d6d8842f7ac5dc28db0f00495903f2520f5a55d69bcb37451abb94b38beeb5da5a959ee5e83b750e0c196f40c48f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8a6dab9689ba560fade603ce0ca0434a
SHA1 d17a9a40da91dfe3f66820e46a489b14d8ef5cac
SHA256 282461f7efa44a003ed58118807f47175b38ff0f826dff03c725a727c03b4b24
SHA512 6577e664f360912b199dfdaec69293e89b3a408f65a2edc4d77928a7751d1d64e640ced68e28d78b45f5a27fc16e97f61c16c87e81dd6b0004a5db1519b304b6

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-11 14:31

Reported

2024-06-11 14:32

Platform

macos-20240410-en

Max time kernel

5s

Max time network

6s

Command Line

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D"]

Signatures

N/A

Processes

/bin/sh

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D"]

/usr/bin/sudo

[sudo /bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D]

/bin/zsh

[/bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://link.mail.beehiiv.com/ls/click?upn=u001.FC1hxQg0vjMaKvj1drxxGhPijIz7p5dh-2F-2FXs8McaZ3HNO-2F5E-2FX1Y-2BgqW3s16aWyMvtml_k5zaofJQ6PaDm4eQpA56e4xWG4OoVdk-2BXhZTssh6QwsCP88A0kMHGtSsxje-2F1AU3vxq9wJlsTU2He4GCU-2B0QkXpPt8Ki21B1FxWphXONSWqFmoeqetfmHdkYx0SZHHtrcbLURHgOUZWuz9r4y0t6S0aIrN-2FmmjyU2VokIizjozKxO227qL0keRYMHmIgB-2B-2FaEsyR3rGTNpfFGhtzYJdlRoYIezBbc848hnlLqDQbFU6tJ2nPO1-2BEilQFFLnfG7oQ2VzDfPat2a-2FMCbs1CreDflnH7SFXv2tb4BVxVI2qxkTJFl6M7rJtB9HnpAC8hZw8VeNoCBHYsFXPGjfr-2FhUJkM1R4QPgjGy-2Bri70gdY5cW6W6QyR7fE1ZrPcCWboQFgxsz8JNhArsbq-2BpsO39eaFo-2B3k5rAN3xejyxqN8vKD5sadnj0DGXn92u01HEG7yLbaYq3HdfmpAQ9ql-2BAb4Jev0Q-3D-3D]

/usr/bin/pluginkit

[/usr/bin/pluginkit -e ignore -i com.microsoft.OneDrive.FinderSync]

/usr/sbin/spctl

[/usr/sbin/spctl --assess --type execute /var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/T/OneDriveUpdaterB516C108/OneDrive.app]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.systemsoundserverd]

/usr/sbin/systemsoundserverd

[/usr/sbin/systemsoundserverd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.audio.AudioComponentRegistrar]

/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar

[/System/Library/Frameworks/AudioToolbox.framework/AudioComponentRegistrar -daemon]

Network

Country Destination Domain Proto
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
US 20.189.173.23:443 tcp
US 8.8.8.8:53 api.apple-cloudkit.fe2.apple-dns.net udp

Files

N/A