Resubmissions

14/06/2024, 14:38

240614-rzy4davcqa 1

12/06/2024, 15:10

240612-skg2zszbnh 1

Analysis

  • max time kernel
    50s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 15:10

General

  • Target

    RunApps File Manager.html

  • Size

    121KB

  • MD5

    3ccfc14c7036aaf68d777905815372eb

  • SHA1

    e756de935a53cab267c67d279c55d270cc8a0e6a

  • SHA256

    eb8915ba0fef2d9f8b8413c83fc8d5ee24ba18cbcc6a896859b99976f25e7331

  • SHA512

    82125468aeed3221c3ce3dad3ec545a3170429df2d59e99fd7020bc69d71c359739c5b3be266cc72ad8cfcae4f4ff558e9ed6a454d4d2d4a69da295cea9a748d

  • SSDEEP

    1536:YmtsnAltP+S0R3EapQCcgzpvFWo1WRTJqGFXkU3N3KuFYtm6WmMrRt/1Gug0eKsY:HX+S0x6CcEroYYrRZA0dsdK44CC8E

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\RunApps File Manager.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1988
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1988 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2316
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2844
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6a89758,0x7fef6a89768,0x7fef6a89778
      2⤵
        PID:2476
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1192 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:2
        2⤵
          PID:2512
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1532 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:8
          2⤵
            PID:2700
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1632 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:8
            2⤵
              PID:852
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2272 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
              2⤵
                PID:1244
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2280 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                2⤵
                  PID:1360
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1460 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:2
                  2⤵
                    PID:1432
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2264 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                    2⤵
                      PID:2124
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3336 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:8
                      2⤵
                        PID:1620
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3348 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                        2⤵
                          PID:1444
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3100 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                          2⤵
                            PID:2324
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3048 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                            2⤵
                              PID:2232
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:8
                              2⤵
                                PID:1428
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2668 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:8
                                2⤵
                                  PID:868
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2600 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                  2⤵
                                    PID:2140
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1556 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                    2⤵
                                      PID:1400
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=2276 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                      2⤵
                                        PID:1504
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=2532 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                        2⤵
                                          PID:3016
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3480 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                          2⤵
                                            PID:1656
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1992 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                            2⤵
                                              PID:1708
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=3512 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                              2⤵
                                                PID:640
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=1876 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                2⤵
                                                  PID:1496
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=1400 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                  2⤵
                                                    PID:1756
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2492 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                    2⤵
                                                      PID:1932
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=2504 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                      2⤵
                                                        PID:2976
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=3440 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                        2⤵
                                                          PID:1548
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=1860 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                          2⤵
                                                            PID:1504
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=1764 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                            2⤵
                                                              PID:1536
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3420 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                              2⤵
                                                                PID:492
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=2488 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                2⤵
                                                                  PID:2036
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=2532 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                  2⤵
                                                                    PID:1636
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=1936 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                    2⤵
                                                                      PID:272
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=2672 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                      2⤵
                                                                        PID:2948
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=2804 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                        2⤵
                                                                          PID:996
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=1088 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                          2⤵
                                                                            PID:2236
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=2264 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                            2⤵
                                                                              PID:2536
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=3460 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                              2⤵
                                                                                PID:1612
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=2500 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                                2⤵
                                                                                  PID:2092
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=2516 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                                  2⤵
                                                                                    PID:2480
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=1852 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                                    2⤵
                                                                                      PID:2932
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=3368 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                                      2⤵
                                                                                        PID:2432
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=668 --field-trial-handle=1124,i,6916310440370261870,11203271918477725739,131072 /prefetch:1
                                                                                        2⤵
                                                                                          PID:748
                                                                                      • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                                        1⤵
                                                                                          PID:1228

                                                                                        Network

                                                                                        MITRE ATT&CK Enterprise v15

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          aefd77f47fb84fae5ea194496b44c67a

                                                                                          SHA1

                                                                                          dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                                                                          SHA256

                                                                                          4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                                                                          SHA512

                                                                                          b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                                                                                          Filesize

                                                                                          264KB

                                                                                          MD5

                                                                                          f50f89a0a91564d0b8a211f8921aa7de

                                                                                          SHA1

                                                                                          112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                          SHA256

                                                                                          b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                          SHA512

                                                                                          bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          d5807bb49ab12cbc5ec7b42638cfd047

                                                                                          SHA1

                                                                                          640efce6d0e3df03c5e42ece49ff35ff00c51b15

                                                                                          SHA256

                                                                                          1c1597f8b5dcc43c5395496c0756d9947b8c5c3c878538a2b7a8971e7947f466

                                                                                          SHA512

                                                                                          e25df78073a3a92d559bb0dc2c556a455ba4b26c0b6210c7b38685c7bea6b79688f3c8d7015d397a2457c0292dca39a398d8315227f4561d8883acdcc1713193

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          49387b0fa4151ec781304f9f9fa3e27c

                                                                                          SHA1

                                                                                          51270c378d4287e209b7f29451cca7e589b7c802

                                                                                          SHA256

                                                                                          0e233035bf94eb8604e1f52091a62bc6b7c8a056f361a8b0ff2d2ea875061000

                                                                                          SHA512

                                                                                          3628a6c318886afbfc0ae26a4a90c47ec1f4208f95db376cedcfd30e7086cde58a92572e9bc3b06947ba3b4dc0b5028e799888e60fb41d580db73ec16e0a69b7

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          66d57b9ef0262b147410ed6d76c6a744

                                                                                          SHA1

                                                                                          a0795ad9618e3c0b4349a644cd9f937fc7b6efba

                                                                                          SHA256

                                                                                          aa0dd948e704fc5278eedadb7161669dadd3d638ef04edf45326f2a4c5467425

                                                                                          SHA512

                                                                                          5ae22e932491d6f9aeb98e21943d5a160e3c88af53a4873629d3a1ce817fc61551df3b581deea6ea83656bfcd5a8c4ba9e704a1678a9a7b4edd277812b03f793

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          8263b098e01d984ece358d0b97c9e94e

                                                                                          SHA1

                                                                                          e9fedb57116c99cea54ce7fea9a48bd685e4240b

                                                                                          SHA256

                                                                                          895837e5c7cafb71c0f8edbcb5a026a9e70d40dcc09522f517a380a3b460b68f

                                                                                          SHA512

                                                                                          02ddd28423306155eddf374a63e214e5f6dd67b3df3a38c3ecd922f457681bfb9e5b19d83a56e3d05db23a74934e286a0214efbefb244f6c9af6646366a3072d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          be9c55f5c9c8aee377c2bef2cb9d47d3

                                                                                          SHA1

                                                                                          837f24374c69421628347296ea5bb26979592d03

                                                                                          SHA256

                                                                                          f5deae0a78fc36469d58f999342b422b8dc65a7ccd2ac55eb4f7da43bc6df817

                                                                                          SHA512

                                                                                          dd2a060ce847482a931bdf71587f0c7b7e0c649194d55d2c801a9185c50378f0f0cf5845df469158edb054d448ee0b9c3ab3197c42f3a2b1ddda2344dce127ca

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000007.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          18e723571b00fb1694a3bad6c78e4054

                                                                                          SHA1

                                                                                          afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                                                                          SHA256

                                                                                          8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                                                                          SHA512

                                                                                          43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          140KB

                                                                                          MD5

                                                                                          f4f3a050ca63937f748bee645b85e684

                                                                                          SHA1

                                                                                          88b831e4d9ea62253de2ede6580343625ceb15ec

                                                                                          SHA256

                                                                                          06b1d674721016fca803470732c3b3e3cc1e6801f7b65211f2bc00ea384e4d25

                                                                                          SHA512

                                                                                          b19475588b76737837487ca4ccbf5cd7bac7f08d3a84697acbdf82f0bd4caacf2a0fd82a2a6d9d248a8daf6b1f17985973422d95255483a8fa7a7c928477c54d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ef575b42-31ed-4239-b6c1-279f7e7f2646.tmp

                                                                                          Filesize

                                                                                          142KB

                                                                                          MD5

                                                                                          9ef330c7ff216926a41a2a200c039eeb

                                                                                          SHA1

                                                                                          c3a59fc62680b448281423bcdadebc4d832d64f7

                                                                                          SHA256

                                                                                          ad99a77a6f3326606cc1e9036c4218c94a56a0fbaaddbe90223ccb6754c7b282

                                                                                          SHA512

                                                                                          453b2451c6d8e5f766f0916df345b0079248720bd06c669b733417eb0ddf35bc8340c1d5272bd547e8961231534832a28a11271e4a16622ed168fb933138ff7f