Analysis

  • max time kernel
    184s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18-06-2024 18:45

General

  • Target

    file01.js

  • Size

    85B

  • MD5

    035fcf1a2f6722934f56846b8df9ff5f

  • SHA1

    4c13ad3cf6e8783615e8d4a42a66decdd0b4f8c2

  • SHA256

    7d35208b00c592d483ac98bed41448ef816aac6e20df697b7fb84cc224a086c6

  • SHA512

    8edef50d1f7d734cdfcb4792ec7c1d8be5735eacbae790730009b209d84a0e206063f23233a699e640ee1d171429246484f17b223265a5fdedc59850addf83f4

Score
3/10

Malware Config

Signatures

  • Command and Scripting Interpreter: JavaScript 1 TTPs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 12 IoCs
  • Opens file in notepad (likely ransom note) 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\file01.js
    1⤵
      PID:1996
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1748
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6c19758,0x7fef6c19768,0x7fef6c19778
        2⤵
          PID:2556
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1184 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:2
          2⤵
            PID:2612
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1516 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
            2⤵
              PID:2504
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1588 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
              2⤵
                PID:2444
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2328 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                2⤵
                  PID:2904
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2340 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                  2⤵
                    PID:3000
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1400 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:2
                    2⤵
                      PID:760
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1428 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                      2⤵
                        PID:304
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3020 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                        2⤵
                          PID:1876
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3592 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                          2⤵
                            PID:992
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                            2⤵
                              PID:1764
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3740 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                              2⤵
                                PID:936
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3196 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                                2⤵
                                  PID:1768
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2408 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                                  2⤵
                                    PID:1328
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2792 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                                    2⤵
                                      PID:1320
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2416 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                                      2⤵
                                        PID:2544
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4076 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:1
                                        2⤵
                                          PID:3036
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4192 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                                          2⤵
                                            PID:2100
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4312 --field-trial-handle=1376,i,17906223621543448907,15336067068990018641,131072 /prefetch:8
                                            2⤵
                                              PID:1536
                                          • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                            "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                            1⤵
                                              PID:2664
                                            • C:\Windows\system32\taskmgr.exe
                                              "C:\Windows\system32\taskmgr.exe" /4
                                              1⤵
                                              • Suspicious behavior: EnumeratesProcesses
                                              • Suspicious behavior: GetForegroundWindowSpam
                                              • Suspicious use of FindShellTrayWindow
                                              • Suspicious use of SendNotifyMessage
                                              PID:2432
                                            • C:\Windows\system32\rundll32.exe
                                              "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Desktop\fun.bash
                                              1⤵
                                              • Modifies registry class
                                              • Suspicious behavior: GetForegroundWindowSpam
                                              PID:2984
                                              • C:\Windows\system32\NOTEPAD.EXE
                                                "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\fun.bash
                                                2⤵
                                                • Opens file in notepad (likely ransom note)
                                                PID:2540
                                            • C:\Windows\system32\NOTEPAD.EXE
                                              "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\fun.bash
                                              1⤵
                                              • Opens file in notepad (likely ransom note)
                                              PID:2876

                                            Network

                                            MITRE ATT&CK Enterprise v15

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

                                              Filesize

                                              70KB

                                              MD5

                                              49aebf8cbd62d92ac215b2923fb1b9f5

                                              SHA1

                                              1723be06719828dda65ad804298d0431f6aff976

                                              SHA256

                                              b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

                                              SHA512

                                              bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

                                            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                              Filesize

                                              342B

                                              MD5

                                              660ce4a16acfd9300d7d90586907b91d

                                              SHA1

                                              dc2213e37a480a8c328390ae7bf9c4e988f30693

                                              SHA256

                                              c22d29c44f1031f196777e7c57b5e08168507da9d140fc19268e2d10e2926e36

                                              SHA512

                                              97318da2923df2aae809ca77e88ce65917b3a596602666df5a34fe77f5e3b4913b17a020b613c576f1f7fa02166e7e21f21d411aed5ca9b43217f7bede95378c

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\11d73317-28fa-45f0-a12b-a8639b5f6583.tmp

                                              Filesize

                                              279KB

                                              MD5

                                              5e40f06fecc929ba7f0fd9e002b9b99b

                                              SHA1

                                              cd83374eaaac0ba012f86447de30719ad0f95567

                                              SHA256

                                              588dcf5f9a46edb3d2e5976b79e053b0f56295b30dc9a206996ea4d6a1d5f2f1

                                              SHA512

                                              43220600b4e448d1e0a25f341fc1b79d5332cf096a3da471c3a0b1e5a582e6a5db2149567e120e345a44606bf65fcb8edffeda4676b8a9d106359369f58ec56b

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

                                              Filesize

                                              69KB

                                              MD5

                                              921df38cecd4019512bbc90523bd5df5

                                              SHA1

                                              5bf380ffb3a385b734b70486afcfc493462eceec

                                              SHA256

                                              83289571497cbf2f2859d8308982493a9c92baa23bebfb41ceed584e3a6f8f3f

                                              SHA512

                                              35fa5f8559570af719f8a56854d6184daa7ef218d38c257e1ad71209272d37355e9ad93aaa9fbe7e3b0a9b8b46dfc9085879b01ce7bb86dd9308d4a6f35f09e5

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

                                              Filesize

                                              326KB

                                              MD5

                                              f9aaad4ba56686b732f585534a79ba29

                                              SHA1

                                              d8f7c5244b305dab6e9a157a032e6c09cb599db8

                                              SHA256

                                              ad233529f61ef20e088a5f0068bea402097d028e06849c14468506aaa292d824

                                              SHA512

                                              04101d276be1561515b76167f32df22f14976ec36ee485687f709e18f52aacde2c5508b1fb068b1e744b10b6192954942cfe0992df62ae1c4ba01da1d928eb3e

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

                                              Filesize

                                              133KB

                                              MD5

                                              b609af4f8ac31c8ca07d489d909a6902

                                              SHA1

                                              32450b199004e269a69fb211dff176cdd5170976

                                              SHA256

                                              f5ac7e1c949dee2187d2d94e8034da9727eefefbd3ad9839c70356c1f05fabf2

                                              SHA512

                                              0717c49d0051e1a69f175fa95bfd7deb4b8071e11e9b8bef3199f7dbd2b126421c7975cbf54a7f0bacd10bf626a640991d03bcd166f9fa2ffd1b860007b53c38

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                                              Filesize

                                              264KB

                                              MD5

                                              f50f89a0a91564d0b8a211f8921aa7de

                                              SHA1

                                              112403a17dd69d5b9018b8cede023cb3b54eab7d

                                              SHA256

                                              b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                              SHA512

                                              bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                              Filesize

                                              361B

                                              MD5

                                              10ae043f674a7b29549fe2db9d79acf9

                                              SHA1

                                              a746bd5c28c958bad1668f82e9eba544920397fd

                                              SHA256

                                              d4de60b0c228062f5013732ac47b31217edca12d7c51c9fd5b24fd4d6ed5e5df

                                              SHA512

                                              31be2e4834f372f8fcaf2a7fa91a25a11c5ccd7dff3cc9d64c24f0c3c9e784b02e723c38e466cad6f0a490983fa224ad319c3c212f77206dd934e6385048f02d

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                              Filesize

                                              520B

                                              MD5

                                              ea9b914f49635576fb96ee033057a508

                                              SHA1

                                              f401f51581c13b3e4d8be732dcd237055bec91e7

                                              SHA256

                                              07dc8b7ae5e700e2e36299cba5a6eeffa1c53807701a30d7551d744e1a0d66a3

                                              SHA512

                                              e755d0dd029d43b71bed599232d3244387d908f1c79ee3106ebbe4138b6626e9377f1c2b404f0306db377780c9317dfda393bc87e7994dd74dea3357079132c1

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                              Filesize

                                              361B

                                              MD5

                                              57194779ca7b21a1da5202b8ac68e006

                                              SHA1

                                              11d4dd69fa1650373c54984d758b74c1ae7d0947

                                              SHA256

                                              5581815a95d1a7992ffeb56e82fb4926497d2e0a98aeef3de66d0b19f74ec384

                                              SHA512

                                              bd2779b12547deafc8356413347b49a8b71f748464cb040413bf29eb42676d94ea0172c59dbb8b2a42d0d4451f046fb40c98bdc632d4ae95d400287f5203e460

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                              Filesize

                                              6KB

                                              MD5

                                              9855d678dd1fb5c7ff3b38bf84e99b5c

                                              SHA1

                                              1cb53c7b0edce095380e9eadd20af245560855df

                                              SHA256

                                              dfd09e94f97377df51751eb927cb42a145df1e52cbd0fcbbd0f23056d4523c20

                                              SHA512

                                              79341d7e4c26f32fa09321ab8885ae255885f9f66d6784eaa24441040770528ffef0e2e30f70d03e4509ab85a7b112ae4cae4203a91dc078964713ac318f092a

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                              Filesize

                                              6KB

                                              MD5

                                              eb6e767aa07aa394168c3ec65c9d3cb5

                                              SHA1

                                              2538b1daf5ee99422d36c2497e5fa83ba0c05ff5

                                              SHA256

                                              871a0b3c60b7a69fd5a90e8309d4baeebb410ab6b0ca69d84ea4a7d636f86989

                                              SHA512

                                              f042012a675bf8b4539b76598e3ffdf8fb5a524754e7a420059ea61719bbfdd3debe82ba839cd4e389719bc64c27da26a980ff1b7e8e3a1ed7130b4790d8f69c

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

                                              Filesize

                                              16B

                                              MD5

                                              18e723571b00fb1694a3bad6c78e4054

                                              SHA1

                                              afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                              SHA256

                                              8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                              SHA512

                                              43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                              Filesize

                                              279KB

                                              MD5

                                              6d8d3b6388f7afb3a5f1dc584a138f88

                                              SHA1

                                              51c2f62b1e45f3904ba984c234be15d0172c93c2

                                              SHA256

                                              caf5ea6ce22fe095809890b0231bcf4b3e0b86783525038c55fdbe1646ebcd9c

                                              SHA512

                                              4c1310958676cfc973469b8215ea3df9303bae33a549d8225f7741ea0eac24d8b65c88ebb635fc0077185bfeadd88ef5e4c2093c6bc04244b8aa86d2cd7185bb

                                            • C:\Users\Admin\AppData\Local\Temp\Cab8FE3.tmp

                                              Filesize

                                              65KB

                                              MD5

                                              ac05d27423a85adc1622c714f2cb6184

                                              SHA1

                                              b0fe2b1abddb97837ea0195be70ab2ff14d43198

                                              SHA256

                                              c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

                                              SHA512

                                              6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

                                            • C:\Users\Admin\AppData\Local\Temp\Tar9112.tmp

                                              Filesize

                                              181KB

                                              MD5

                                              4ea6026cf93ec6338144661bf1202cd1

                                              SHA1

                                              a1dec9044f750ad887935a01430bf49322fbdcb7

                                              SHA256

                                              8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

                                              SHA512

                                              6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

                                            • C:\Users\Admin\Desktop\fun.bash

                                              Filesize

                                              8B

                                              MD5

                                              96db3a4107eb507ebb9ce86f1b172e2a

                                              SHA1

                                              c1891a0edaa4de3c5d510afc9dfcf11561db3a5e

                                              SHA256

                                              b0a6c77ad0b003d97234240bf05fb9cbd6fb393fdab5f185c68a2e9d6db72c4a

                                              SHA512

                                              be903f0e4eeca27ac6906297a38de3a3316f738a23e27ea585a793bf24f4b6d9b4af32a5074338c07ef2231410843a3f779daee87e529548608f279917dc3335

                                            • \??\pipe\crashpad_1748_LTQLHHSXHQLSWQKV

                                              MD5

                                              d41d8cd98f00b204e9800998ecf8427e

                                              SHA1

                                              da39a3ee5e6b4b0d3255bfef95601890afd80709

                                              SHA256

                                              e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                              SHA512

                                              cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                                            • memory/2432-493-0x0000000140000000-0x00000001405E8000-memory.dmp

                                              Filesize

                                              5.9MB

                                            • memory/2432-492-0x0000000140000000-0x00000001405E8000-memory.dmp

                                              Filesize

                                              5.9MB

                                            • memory/2432-494-0x0000000140000000-0x00000001405E8000-memory.dmp

                                              Filesize

                                              5.9MB

                                            • memory/2432-495-0x0000000140000000-0x00000001405E8000-memory.dmp

                                              Filesize

                                              5.9MB