Analysis Overview
SHA256
98fa8be248d9c773ddab208fca3ef2cd61a7b7fe6a00dcebe688de48ab6518a2
Threat Level: Likely benign
The file tetris-effect-connected-free-download was found to be: Likely benign.
Malicious Activity Summary
Browser Information Discovery
System Location Discovery: System Language Discovery
Modifies Internet Explorer settings
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Enumerates system info in registry
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-11-09 22:00
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-11-09 22:00
Reported
2024-11-09 22:02
Platform
win7-20241010-en
Max time kernel
78s
Max time network
150s
Command Line
Signatures
Browser Information Discovery
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Zoom | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\InternetRegistry | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DomainSuggestion | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\PageSetup | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a04c4fd5f232db01 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\MINIE | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e78a69453f00554b9c7935775bae7b960000000002000000000010660000000100002000000072d015ef0f642ab97e7251997cbd4c84508b49db4f78d3e933290b6d51d7dc31000000000e8000000002000020000000609613a7e9678c1620e2eb9550d1f07bc13a023e904b8cbb7a3a1b0ce433b56f20000000d58f5da0ed76094ac2e49cbe0e9ad92d6dfc5e567f202fa55d6fdd280a69e3d540000000dfab2b476b231402e27b1379af1780c304a34c6318284d5c44f5b8e30bfecd5879e8cb2811768d1139328dd13bdade17a1d49a69c870598b65a8a828a36da705 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\GPU | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\IETld\LowMic | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\IntelliForms | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\SearchScopes | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{00B64291-9EE6-11EF-9906-CA806D3F5BF8} = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "437351484" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| N/A | N/A | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\tetris-effect-connected-free-download.html
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2844 CREDAT:275457 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5ef9758,0x7fef5ef9768,0x7fef5ef9778
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1176 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1464 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1612 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2308 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2344 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1176 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3176 --field-trial-handle=1380,i,8973159475759337371,14633173359505136334,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5ef9758,0x7fef5ef9768,0x7fef5ef9778
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1168 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1564 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1624 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2152 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2320 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1416 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3384 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3524 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3532 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3696 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3716 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3744 --field-trial-handle=1256,i,2319363224172481048,17742239267309783489,131072 /prefetch:8
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 142.250.180.4:443 | www.google.com | tcp |
| GB | 142.250.180.4:443 | www.google.com | tcp |
| GB | 142.250.180.4:443 | www.google.com | udp |
| GB | 142.250.180.4:443 | www.google.com | udp |
| US | 8.8.8.8:53 | ogads-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | apis.google.com | udp |
| GB | 142.250.178.10:443 | ogads-pa.googleapis.com | tcp |
| GB | 216.58.201.110:443 | apis.google.com | tcp |
| GB | 142.250.178.10:443 | ogads-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| GB | 172.217.16.238:443 | play.google.com | tcp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
Files
\??\pipe\crashpad_2724_ZCNSXJCAYOZCSZPG
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000007.dbtmp
| MD5 | 18e723571b00fb1694a3bad6c78e4054 |
| SHA1 | afcc0ef32d46fe59e0483f9a3c891d3034d12f32 |
| SHA256 | 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa |
| SHA512 | 43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2 |
C:\Users\Admin\AppData\Local\Temp\Cab83C3.tmp
| MD5 | 49aebf8cbd62d92ac215b2923fb1b9f5 |
| SHA1 | 1723be06719828dda65ad804298d0431f6aff976 |
| SHA256 | b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f |
| SHA512 | bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
| MD5 | f50f89a0a91564d0b8a211f8921aa7de |
| SHA1 | 112403a17dd69d5b9018b8cede023cb3b54eab7d |
| SHA256 | b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec |
| SHA512 | bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58 |
C:\Users\Admin\AppData\Local\Temp\Tar84A1.tmp
| MD5 | 4ea6026cf93ec6338144661bf1202cd1 |
| SHA1 | a1dec9044f750ad887935a01430bf49322fbdcb7 |
| SHA256 | 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8 |
| SHA512 | 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7893101b8538c77bfdc4e031ab81c56e |
| SHA1 | 022a42966c9d7dff00f82ff84a016c3f97c6f203 |
| SHA256 | 875aa314ea717ff05df21729e28c03012a9a5900e3844d6ae6f2123ff3fc3bbd |
| SHA512 | 5f9350c4f3c0d3e383cc18777742782282c882d5474214cd1e05d34965ba63615673ac93b40726bbd2bf2b259d4148085ceaf42e187a12bdeb56acac6978c61b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 214eabd69cd8c42f30545465aeb5ac6f |
| SHA1 | 64a54987db48b7c5c9f1568218c3719ad19e2fb5 |
| SHA256 | 19675ac7243a0a6312f82b8d8ac9d9d9564b5d6bf97f6262afddb506d0413aef |
| SHA512 | c3e8e772f8b6bf89dd9f30c6502e05ae43053e27ad4ee0ecee8f5f39d0052677ec5fc93be6430baad8b9246ecaf3a7ef7c248ea653cd28cd300095635f5a64b5 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 59eec8a8797a3084e1540fa13d57dcc3 |
| SHA1 | 02db05f5f976233b559b80f5251b475a8cb9b219 |
| SHA256 | b629a77f239eaa65325cb9cc6509218d90cfd6b50334c58c379b0128941b6d2b |
| SHA512 | 4174c2a64ec9b3abe5cf8358856ce6f0c9382e57b04be72daf937fd0ee5f5f4db149e3fb2592491f9db5ad5b88be395709be56c61fd4ec934c81c8f1a5268cb3 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | d4fdc59d0056397a37f8d5ff8f5280c3 |
| SHA1 | 404721486493e4d24b3d3b1d973f0bd6717f52d6 |
| SHA256 | 3a87940297e87644593baa4dc1e9a2a1398824bd4a35f962129cc588da5c2bde |
| SHA512 | 0a539e40093292a21e83390781c7ee584bcd7658fc6de40dd499029c837b9e8da64b856515ce621a5a24cf5abcd5a5c49db252e3d4af948467e343940ff32c18 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | f2a2ab062ca6344d54c587e015c146b7 |
| SHA1 | d2d2b47e7777832df5a51c5156bc58e1c95f534b |
| SHA256 | ae7902acb78ec4de7307b78f7f1b35416537b339c8064480e3e07cd71f665898 |
| SHA512 | 4a0cd459b28593f4d173dfe7a60b8142cd9281672999446944f2b0f5eb03fbdf6d4f1280c2a275348c881b6b7dca3839d39d6df4a32504cdc824a6934dbbbad9 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\edb6386a-e6f4-454f-9dc3-37938a0dfe2b.tmp
| MD5 | 944bbe318b30030ab458aae3196f0211 |
| SHA1 | 99dffbdcc2cd9645278c4231acf4add7f9902b10 |
| SHA256 | bc313bba8dfb55cb9097ff521c760d95e112d8931d9d24696fe4f57124687e81 |
| SHA512 | 91d2e5e142a8ac892d4c38675e5ee45ce2bcd5a41c846253a6081f0d41349d0beb4e14c9edf1b56d0d478d6c101c58ddb44b3dae6a2046bc382e479974503bcf |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | edb739f6744c39f91d2c91669f8974a1 |
| SHA1 | 836542db815859ba3f6ef8720a243ca102e37edd |
| SHA256 | b04b78ddd7ae0f5eb75d546e6222ea7b7573ec121b55448b64c714e049acfdd6 |
| SHA512 | 29384bc285c451270e5b5731ba05978bb1c833ec4d98058d8a2de0396f7c960d98e5ed7745661b7e8528585d3a17e020949c569d8135a85910091b97adba47ed |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 50410910dcf3e0af71b24321f79c18b1 |
| SHA1 | e597471fe7f84213d6dff00619f8c6b2638e3e38 |
| SHA256 | 2b0deaa8137a6bb82679fa49703ba7a7dfb93c044f7747fcb8f3214999366311 |
| SHA512 | 91b9c261d2efb1b063c50fe160f5287d00bca1e9902c2bffdd879b10168f284740475c66d149dcfaf3999e208463a07fc493336e30585f9ac77455936385244e |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | e8de98acac94525e7ea378122874df29 |
| SHA1 | 35756b0236455a044f3bdf0f11199db9fd16d70e |
| SHA256 | 76a496810fc12c8c0f5e47bcf2dcf5952e7b6b04df9ffc65f5ee3c0551b55e87 |
| SHA512 | d6153878ccb6097fbfd48f93a2f2a2126062b48c48d9180299333250aa35a9f23bb3352fa8e9c6e95d25d0f53cdf26fb0836ef3b303dccd30fef0ec2abaab2e2 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | c44db3de01d95496d7958b9145dd817a |
| SHA1 | edfa2f16f0528ce76ed71f0213a6a676a34237cb |
| SHA256 | b0269a6299206c3778eb6221279d0b4ce693fc0969206df24ce7cefcefe82f9d |
| SHA512 | d7da32fafa250b203d7602f53e3f774f30bd373e6a89f569fa8fcbceac7cdfa309dbd89f62c0395bd6a000dbfa70d79227411a7618a6693734dcc5ea9390d351 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7b08ec0ce51bf44d69601fc2219c098e |
| SHA1 | 02fee2e14c10d7f5223787a63308d6b778f96524 |
| SHA256 | a5cae94c0c2c569ca63ad85c11711913713f27ba891cb5a4435035423318d86e |
| SHA512 | d92f8181e7502748c87247ac343d97d0fd0e2fdf8105ebff34fbab62155aba02553ea3511ee46f58b86580644aacdca8eb2eed3138c0fa52853d99d6b2ac496c |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
| MD5 | ade370d72a5e4a9155639bd6aa7522f6 |
| SHA1 | 1f3fd4c8c7c358053efb7a665155bfced357badf |
| SHA256 | 3fa4c0d6a158c0cf88ab17ad09018739515eefc3ff31bffff3414cd50c4a73cb |
| SHA512 | 5723284b5ac7e7c953f0582598d34b302ce620bcd0f9a4261bc364ce033669eaaee298c47f4a17940710f3e656c7e160c0dc0638b839317e7221427332ef076d |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
| MD5 | bc6142469cd7dadf107be9ad87ea4753 |
| SHA1 | 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c |
| SHA256 | b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557 |
| SHA512 | 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
| MD5 | 9eae63c7a967fc314dd311d9f46a45b7 |
| SHA1 | caba9c2c93acfe0b9ceb9ab19b992b0fc19c71cf |
| SHA256 | 4288925b0cf871c7458c22c46936efb0e903802feb991a0e1803be94ca6c251d |
| SHA512 | bed924bff236bf5b6ce1df1db82e86c935e5830a20d9d24697efd82ca331e30604db8d04b0d692ec8541ec6deb2225bcc7d805b79f2db5726642198ecf6348b8 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000007
| MD5 | f3e5497105538916a4a27e319681c079 |
| SHA1 | 1b92c17f1ba7e66ea9058eebfb21dba1acd840fc |
| SHA256 | 697b7d0935fef557c883d53fc8cecb0567c652b495e645d609180b06a43ae9da |
| SHA512 | c9aa65f6f740f04bf8e60a04da403bd5e8fe7f3c219444d94ae0afa17c8fb7f3d742a9ea3fa69e538616d4610b151b3cd9cf0dbc568cedaa1c42736ef796c0ee |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
| MD5 | 2b2d3b91ffe4b489bfb2899fad274a07 |
| SHA1 | f0f3dbf19a35b075d32f84d509b86b26b32e5b30 |
| SHA256 | e08b741562e3ce57ff335ea81e7d80d6c8c21248dfa375acb719b353bb03e2b3 |
| SHA512 | 3c611af3b764242bfe761429f5271a8554335819058549209a842427a381a1902d0c00da8c5b726c654d7291df9ee560f9a19bce90f8402fd6c0cbc3dfb61642 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000007
| MD5 | 22b937965712bdbc90f3c4e5cd2a8950 |
| SHA1 | 25a5df32156e12134996410c5f7d9e59b1d6c155 |
| SHA256 | cad3bbec41899ea5205612fc1494fa7ba88847fb75437a2def22211a4003e2eb |
| SHA512 | 931427ad4609ab4ca12b2ee852d4965680f58602b00c182a2d340acf3163d888be6cfad87ca089f2b47929ddfa66be03ab13a6d24922397334d6997d4c8ede3b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
| MD5 | ddbf5374b5a1f924156179af251e8f3f |
| SHA1 | faa7a56c6fda0fa6fbbd509afafe401a42b8e99f |
| SHA256 | bf7c5e6cc64399daeb16d79c3a64a72d2aef3f45acaf6378e7a590b24d328593 |
| SHA512 | a47013965e85d8c13e665802043fb927d53da00db457b217b4afb36db54374f87c8747f533263e9cef34b5155389672ef694ebc346907e80be81d3d757d04b91 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | b603941e9daacc7a10edeb0a8abc28e7 |
| SHA1 | 39b6a9fd73746a43f18c316898c59d55d3d0beb4 |
| SHA256 | 3643717aceb1b6f6714c9132df45c7b8d42a4520faff7c0a5774f9705c7b4464 |
| SHA512 | d569dbc736ca47e9e06d39e5ab81a469be05364ca4da634e0ff418cf999543487ab5f9f9327d9b73b62734ae1e1f4bfd18af5cf9c52043e5ade5d53244f2adb5 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000008.ldb
| MD5 | f231183c8cee419e238331ae29c92a98 |
| SHA1 | f0fa6ac241682a347e89756f067bb2e5291cf4b3 |
| SHA256 | de595f7b8b66ee9038ae22362dc99cb0c155862d5003c05abbf522dd18c3b97e |
| SHA512 | 415214365e69d403b78817e9dbb7333a52eaf645da50479e25c1e6e950049f715c09eb58d202c59aa617a856f10874072e8fde41db55b0538ce9230930febb94 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
| MD5 | 0a65e7a1da991dd7c6434acbe5b326a0 |
| SHA1 | 67a3c74ea2280fe8187f92d53f19c21f76e1dd83 |
| SHA256 | 6b67d727b1e0edb102188660798579fcb4e8a7af2f0d010e2d155590fd129542 |
| SHA512 | 347cd30472aada4099ccb9b5092ba1ae727dc448529ac16ca4c6048cf47074956158f9e575a5ac7945c638c633163981d7016890f32ead60e7325514a4552dae |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000010.dbtmp
| MD5 | 60e3f691077715586b918375dd23c6b0 |
| SHA1 | 476d3eab15649c40c6aebfb6ac2366db50283d1b |
| SHA256 | e91d13722e31f9b06c5df3582cad1ea5b73547ce3dc08b12ed461f095aad48ee |
| SHA512 | d1c146d27bbf19362d6571e2865bb472ce4fe43dc535305615d92d6a2366f98533747a8a70a578d1f00199f716a61ce39fac5cab9dd67e9c044bc49e7343130e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000009.log
| MD5 | fe62c64b5b3d092170445d5f5230524e |
| SHA1 | 0e27b930da78fce26933c18129430816827b66d3 |
| SHA256 | 1e1a9ca70503efd8c607f9bc7131f08aba0476d75f2586dadb4da5485a5315d4 |
| SHA512 | 924daccfbfb0c0464b4c5fd769e01a8f2e96fe28b635aa27ab4cd91766b05b03bbf941af14c017436107673f01bad815ce1fac2a649e745c76b3c736994b4fd2 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000007
| MD5 | 9ce0de297ae8307289b9a8b85d71344d |
| SHA1 | 111ca14ee7455b171f403e7bbb95159179e8bf24 |
| SHA256 | 6cf9e355c58cef858e7dc1f0ca7e9a7df63d9b9f55aa0bb0b8e9b47d2976c96c |
| SHA512 | d2c96cdc086da1fad94e1e67664306115035f4b76d9c9c80b80cd94e8337ccb637aa4fbe1dc6018b47d46d7011a73245898af821c2fe1b82cdddb8d59196ae0a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
| MD5 | 19e442e33e8925fc7e5d1f7b80408841 |
| SHA1 | 6cfbf2460072bfab33201358972007d93535b248 |
| SHA256 | 80e03903b459d93bec66f952dc34a83f456e5b4b91b2bf34f9e8084fd48c2805 |
| SHA512 | c381e8924ef2dc6f314ca3065a263e8cb623a780813b78fa1036692c46f76f2346e338516bf53a793e34d7920fcaeb7474039fdde3571feb972bc777f2ceb73b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
| MD5 | 3c1363523be1b0599660935010bb6e90 |
| SHA1 | 243e463b1d40f4815ba3abbd0c1b3f3922ac8957 |
| SHA256 | 3309e1fb86d09ccd0bfe895c34156496c3dc0a6ed2fc4065e9a8b49d6cd63453 |
| SHA512 | 0be650fbbbb1012f3755a0904b5ead635e9cb277c1c897938aa14a9421c30916392bb5131b35c61263b83cfa04d2dc650732d58e8d09cb7eee3a32f3a77727e9 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000009.log
| MD5 | a2f36fd75efcba856d1371d330ed4751 |
| SHA1 | fb7c3dff0fa2b47c6f0026287d12d16d05d14d8b |
| SHA256 | 561fe33b81dac187686e9e50103590f3a857f4e1b9c8ada714d43964b938ea7f |
| SHA512 | 79ca96560a074fa678cfdc06007d0e1e01718831d18c4a800c5361b8ba8091b46acada47418a8d7be3b626d2d9af5cf346abcdd88166a9d1634f81157ab1ad6a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000007
| MD5 | 1c0c23649f958fa25b0407c289db12da |
| SHA1 | 5f6b10cd5a39fe8c30353bcf4cd4e4a60ef35574 |
| SHA256 | d5134b804a775cfb79c6166d15b5721d38ffc2da11948a6c1263595d6c2941cf |
| SHA512 | b691e882018833a108bd286bc76c55a140d00d5a266617a3a381af1ceff01aefaef17acef29d14dec931d7051455726cde8974cd04cc07302f1c3cc452fe2f52 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000008.ldb
| MD5 | 50d00b218169f0e5039c17971756f2c1 |
| SHA1 | ec677ee1605f968901198b5da5279b3e3dec3b92 |
| SHA256 | f5c54d4c7e99277d550be5be682bd1709606378c9b80e86dcf8182c99c5365a6 |
| SHA512 | 750070e61164a79ed14bb0a88a7754ebb46eafd6736bf9b882db171dc6f0d6a6e9911a7e3f549fad9cc34015ac2d86020034945e3750ea0c61ec3f64c4b1cfb0 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
| MD5 | 8c5ca0717321af91d857f397a467792d |
| SHA1 | a406489e63ff4eab636d66ba4c35ca06c516398c |
| SHA256 | bf50e1f550473e2f7897dd228340e1694e10e44023aa939fe7a3ea236ca675c5 |
| SHA512 | e4b042411552ff4abe7f7b1d3b1df3594b92b1601f6236c05cd2b03a381f58de0b046d2eccf368ea1101bbb65f748657be1e1fd7b88f0d8cf8e2520fd69c4447 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000009.log
| MD5 | e9c694b34731bf91073cf432768a9c44 |
| SHA1 | 861f5a99ad9ef017106ca6826efe42413cda1a0e |
| SHA256 | 01c766e2c0228436212045fa98d970a0ad1f1f73abaa6a26e97c6639a4950d85 |
| SHA512 | 2a359571c4326559459c881cba4ff4fa9f312f6a7c2955b120b907430b700ea6fd42a48fbb3cc9f0ca2950d114df036d1bb3b0618d137a36ebaaa17092fe5f01 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000007
| MD5 | b6d5d86412551e2d21c97af6f00d20c3 |
| SHA1 | 543302ae0c758954e222399987bb5e364be89029 |
| SHA256 | e0b2fdc217d9c571a35f41c21ed2596309f3f00a7297a8d1ded05f54f0e68191 |
| SHA512 | 5b56ae73a61add9e26f77d95c9b823f82a7fcdc75eed64b388fb4967f5c6c42cb0796b0b99dc25c89f38952786176c10d173dec7862a8a5ce5f820280f72d665 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT
| MD5 | aefd77f47fb84fae5ea194496b44c67a |
| SHA1 | dcfbb6a5b8d05662c4858664f81693bb7f803b82 |
| SHA256 | 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611 |
| SHA512 | b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000006
| MD5 | 78c55e45e9d1dc2e44283cf45c66728a |
| SHA1 | 88e234d9f7a513c4806845ce5c07e0016cf13352 |
| SHA256 | 7b69a2bee12703825dc20e7d07292125180b86685d2d1b9fd097df76fc6791ec |
| SHA512 | f2ad4594024871286b98a94223b8e7155c7934ef4ebb55f25a4a485a059f75b572d21bc96e9b48ed394be8a41fe0208f7bfb6e28a79d75640c5b684f0c848fe3 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
| MD5 | 6eb7241c432664ffec9ab3d169ef0be2 |
| SHA1 | 7914b45241a609f4ec822e990ab88aa7cbe36f02 |
| SHA256 | 7d65be1ffa989bb70e2d9dac4d2dce04392384830af988b1f332e048f9c46ebd |
| SHA512 | 110178c8933e517fe54c8f19bc9f2feca59dc7bad9a3915304b5996d8535558cbe18b282326ec29b418ee974214df5d35ba7b24224c52f78fcf551b6a5470fde |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
| MD5 | 6a426550cf9a5bc6edb60b2378c5c3d2 |
| SHA1 | fc0cd7964822663708dd9528cfe21b6cc813c185 |
| SHA256 | b4dde7f83a382caf4c50b54f8dab425a04a8bcd47dd6931ef785add1be87480c |
| SHA512 | 68844a30e78f0b29fb1d507d9df273a8da18fb3a38045b3deb4cca446ce4ea2499645ab220b5d8e4c255c8c1ebd28ffcae7af88144e6b553ac6f91869256bf47 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000008.ldb
| MD5 | 508dbac4d26dae7991444d74233fe450 |
| SHA1 | d4031cc60e8558e57763d1ad08b313b9ccdf5b23 |
| SHA256 | aab0b4d9bb50313e22071bfd3b7e78b69e2f809c4dbc8573ba1e3aac53f528e9 |
| SHA512 | c0e6d4119c0b669b77d401f7140613fbec357ec69188b3f750c241e5bc781ca8dbc5ac15cdb0000c16d8db6a8e5805f3b120f95abdadc07e0fc2843f2bc31dc0 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000007
| MD5 | 1be22f40a06c4e7348f4e7eaf40634a9 |
| SHA1 | 8205ec74cd32ef63b1cc274181a74b95eedf86df |
| SHA256 | 45a28788cde0d2a0232d19c391eae45777fe640790ac0674d6daa5672c444691 |
| SHA512 | b8f6f42d375e3ad8015d744fa2814994fa6e588b41cce0131fca48194dd40146b08169a8ce0da350525ff32a59a16edb503c72e0f07254955c82a0d38074856e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
| MD5 | 3e468a4dafcd7a371d70b167c19cddb7 |
| SHA1 | c6bd3793fcb6a9a666eb104bfdab2b6e91c80eef |
| SHA256 | 02056c3074e0afe78443b86afa563864ed956c6c26029e3525591f426a73aa2d |
| SHA512 | e437e1181bd4ea42f3f8291467540255dbc859134362869e5cabc5ce3b568c78057d250d5301ca9f7df552290b94181f0c75f24107ef3eac4184b3a8f67ad4aa |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\000009.dbtmp
| MD5 | 979c29c2917bed63ccf520ece1d18cda |
| SHA1 | 65cd81cdce0be04c74222b54d0881d3fdfe4736c |
| SHA256 | b3524365a633ee6d1fa9953638d2867946c515218c497a5ec2dbef7dc44a7c53 |
| SHA512 | e38f694fd6ab9f678ae156528230d7a8bfb7b59a13b227f59f9c38ab5617db11ebb6be1276323a905d09c4066a3fe820cf58077ab48bf201f3c467a98516ee7a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
| MD5 | 4bbdd297f50c8ce2a93f07c0bd37472a |
| SHA1 | 1510a3be06a3b96ce8e7aa5839f2d59c41623c73 |
| SHA256 | 3e7af815fa7cc219573fd9bd6d7d3d7eeef114c025e12d820ceb12597fd52a2b |
| SHA512 | 3b5efeb05b3fff491dcd79483f11b013a37a0db66aa2ffa32410705fa702ba30321183303a0fb4bac9862d265dcd7459dac598010daf59984eba48cd1cafa3ee |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | 6bda8632d73674ac03cbad53a9c8017a |
| SHA1 | a18eeeed5139f2a9bfbed7707da123140da7056a |
| SHA256 | 6b626d66a9b6f33a0d5442cc3f3bf4e5e09bc29810a504831572a91cfea93d92 |
| SHA512 | 438162f368332bd7944f1b87eba6fdb5cac68f39490af92c99782524beaf39dd231bc8e427d15281e83a3b61256c5cceb07353e608d1f7a4d65775f18a986982 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13375663223834400
| MD5 | 47edba8977e1104f4ba224123bf57c4c |
| SHA1 | d9e968b3f959942b92ab4a6fb4e92af81620dcb1 |
| SHA256 | 5e2f379895736b18ce051a670d2da973ebc5a7a2364ba1b2c3097242e0bcabf3 |
| SHA512 | 5c6761b8c26ea16c722217e6e6b0d62afed074a3e871c8f84038a8496957ba378eb3f956f2b053b528f519417f7a361d8c5fe2218da52dc2e51617a5a11f9353 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt
| MD5 | 5cf40d4a572da2e992d9d96fd62a71ef |
| SHA1 | 050b5cc9e26406605fa9c2e7658c43e785f4374c |
| SHA256 | db1038bd756e9b48c35ac8d94351cfce279a5e6f15b9b5e99a3ed234f6e66091 |
| SHA512 | 60926f849f5f8fcb6bda5819655b42bf6415254b5407e2b6c794cad47353efcad48ed373dbce8cb2e3ef95ddddbc10d27160b5f7a4b0afc316681c04fcbb1af5 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | b42e357aade42ff0c32863a9ea5479f9 |
| SHA1 | 7d1a355606714d0aa01dd607b7a656a2a7a64e4d |
| SHA256 | b957ff716308881c9e2bc582d5dac039463a8175b65254a41f6566011b4f3179 |
| SHA512 | 97e0c6f283ded3ca4c0b456adf84ec6a8093ff80ff5ab97dd4afc47750ea53fbf868eb07ca742d0daf95f4112cab7e403c89fa5ce34d4cc2bb78c6f87dbcf769 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | fbd6efde7925ca9cee2fecb4867e88cd |
| SHA1 | 20d1beebf652969b6ed961513d62846da000a071 |
| SHA256 | ad9ba4ef7000eb1e5fd4db8063297754ac04ad669d03f6113f281a0e6adafe89 |
| SHA512 | a142320643d1efba338ec911abee127d737ceafa7b4b37dc66348df12f3615a69517758ed68bdb682bea6fc9eb286d66b9f6bab96ebcb29b9ef1333bb1f7cd09 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | cd66c8a6628c6385fd3fd729afd3d24d |
| SHA1 | 0b1f8425d2cfbca6d1247d0cf6bcc877303a5ae0 |
| SHA256 | 1268a3d477ddf8c5865109aa31f07fb43c023290255f748dfa962bc6a90eed1b |
| SHA512 | cb4f96b0ed1b22d280114cbbdbe3047ea1e6d93bdac7d492b759fb07fba96927acc5393ac21b33843791b90d05d5fbffafe7555978c3329e164c6ff4aabd7728 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 871a55917d08597aa86a38f5bfa2e099 |
| SHA1 | d950c0ba35b8413b01e6fd3b3afc55c99938f3ff |
| SHA256 | aba050406accbcb5fdb10ecc596a3ac0085fa01b9648a84ff6f8444cf30eb904 |
| SHA512 | a61b77727e0a6c5e223aab8ae2e70772b23f3b34f4c5128c551a644fde3680d3987d78635486a0b2e935ac6fc2c5df8066e5691fe5d4a40f16f015862b878854 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 4be18bef2e999abe60fac66bd3a6527d |
| SHA1 | 65a5d5cf3bea9926cc849fbeaf0ac5bbcc4f109c |
| SHA256 | 45d23a155eeb8893b1275c5c80d55983b2277d4e63f275e82c4cbd19c25ac9a3 |
| SHA512 | a6d157182e98343f9a99651d35d03500a358fc6e7a9be6949abbeaee7408ef107dec71ce9fbddd94cd7256ff380485ec9e3defd54dd51f398e02575a440f0509 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 4404decc095052f168cc34004fa078ba |
| SHA1 | b1e48074c83b2203a0e8730f9f0830a76f4b6e6a |
| SHA256 | 4022f47fcb268c7c0f19c988c78ac0a5e288919fba31d7a870f737733576fc6e |
| SHA512 | 682403e8252f24006b775f08a70f6a964a0f5cd7173f6eee05282f24340a91625c8c83ca47a610bf3db88b98ced5567e67e2b51ed735b768f50f34b7f3e1bfbe |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 9fe4953fb4035ebea0a0bd8031d74e60 |
| SHA1 | 60da108f9ec21e4f7f6dcca70e1b7e312572f6e4 |
| SHA256 | f9076aa8ceb4baa0c75a6c2e4db35e2c7bafb4febde8290ffcbf40ee9f6ab45b |
| SHA512 | ffbd37a00f63f195c562330bfef7cf27db1ea23e2f1a115b4610cb820862c993e64ab815ad4f3a1b837d5d3abe1fd0723f9c537239ee88a8a74df69e19e5c82b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | b547d8a9d525584cbacf4f5de111ac58 |
| SHA1 | bd5ad731839f9930206c9aa43da587c2e5e952f2 |
| SHA256 | 8a6a81f07d9ae0ee862b0bd7e8153f8dae1f88cf12947ff3f438f1dfe098342e |
| SHA512 | 4ebbb72e09d2972728302e9bd8e164b962c04700773d6fa047be03714d729a92b8a90309046a2803fdda310a069392a4c4fe2eb3d876ed60e8b3d975980eecec |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 56b5fe3472a1b15c247e4b22e26f8ba5 |
| SHA1 | 8330c6c0f6e87a0920367f5574a32f43e286aed1 |
| SHA256 | 667384da827a56741a14e34939cc74a09fbcd233bb8eb619eec727f5fe3d76d7 |
| SHA512 | a476ff84b338e6edac3a2aa7a45433aa246492613bb3b9e3dac3ddd5c183718b900f3513e5f8b047e0e2ed6391a840eb90fef85a02c22f6ccee6f380b49753ec |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 50832883d552ffbd2f73d72324d60cf5 |
| SHA1 | 7090bb2fb25a0710e6cc579f16ab1fa8a334305b |
| SHA256 | 1d6d1a9ed110b1cd72247f6f04ed3afc61ca814b696e0107ccc83d8ff700dc45 |
| SHA512 | b498ad9f30f57e9bdd5e1626b2d418bffc8aa985aba526cbabcd158f636deda2de830ca384172402764f2838c6aaf4853734fa7381ff5c9804cd07f17cfae646 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7c9f2dff18de69d76b8071829ae0d44f |
| SHA1 | 0bae1424343f758b32d2e02dade3a4326895328b |
| SHA256 | 0b3d1661224dc8d83388d9ae03b5da83ec01d758a1dfb169087e560aea15fb0f |
| SHA512 | a3dee17526ea4e75862f5814b8905800a81ddb67346f129cd6e543e4fc414c04e3c9dda0ba9402e1aa31ec87306835e5773abffdc59acbf5a5df055213e0ee52 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8d86c3d3-493c-4adf-81ff-8a33ac6cc83a.tmp
| MD5 | 9d01f3002cc9b3f1d79e762186e9b908 |
| SHA1 | dd237d5fddb6096162264a02ab525b58a5e62a21 |
| SHA256 | b304a129788467af20916c3447ac222b5996ddf52d8fc4b7958fd1470aa93e22 |
| SHA512 | 7cf9215cbdc4568eb968c4e0651b11645a302c0890d34b1223280f4f5831d9923e0f989e61f9ef7a59ca4d94838f7b3c2b33d2ba50f6d11110e7895f1c626d2c |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 8e1db00ed92694d2174ce79d2d8bd723 |
| SHA1 | d913014bc2cbde3f809879eadc17788a7c3411a8 |
| SHA256 | 62178cc8e208b508d3567a996aff3d861a1c943f7a254591be8cbe08e3b3e0eb |
| SHA512 | 98ef1b6246adb2f6b59df162e24babac8c011f4f3903d05f0e214c5cf87612b8939ef789662c9c0442c30617dc6ac9986af04037974d838cc3cf2412128469d2 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 955587ae37ee745d46ce0682b671070f |
| SHA1 | 1dc67e14514aa431c95e88bafc9df99634df432b |
| SHA256 | 0478ee1e9094527c9039b547fc00c6c666ef08c09c8f67a69efe7353a70f6c2f |
| SHA512 | a6b93f01c188adabe82fdbd16f17a6c2a150146dc104617a9ff2c3777d8eab471371452415a9fbed6c939478e1dc0be1e92e0953e39ae814a2419f67308a9a6e |
Analysis: behavioral2
Detonation Overview
Submitted
2024-11-09 22:00
Reported
2024-11-09 22:02
Platform
win10v2004-20241007-en
Max time kernel
150s
Max time network
151s
Command Line
Signatures
Browser Information Discovery
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\tetris-effect-connected-free-download.html
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcf63346f8,0x7ffcf6334708,0x7ffcf6334718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2884 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5132 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5132 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,11244111784748067987,16133875699575060640,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 72.209.201.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 71.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | 241.150.49.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 212.20.149.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.117.19.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 90.65.42.20.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | e443ee4336fcf13c698b8ab5f3c173d0 |
| SHA1 | 9bf70b16f03820cbe3158e1f1396b07b8ac9d75a |
| SHA256 | 79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b |
| SHA512 | cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd |
\??\pipe\LOCAL\crashpad_2916_LMLTWXWZGOYFVGVK
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 56a4f78e21616a6e19da57228569489b |
| SHA1 | 21bfabbfc294d5f2aa1da825c5590d760483bc76 |
| SHA256 | d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb |
| SHA512 | c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 94961919ad339943c5b2dd4c29836bc9 |
| SHA1 | 3905100a8e1ec3f4951248851bd79602bb21d69e |
| SHA256 | 59588b4ff5540e610733b95dc2ed6adc8735ef98d7173eca2f27a992cc6235e7 |
| SHA512 | aa3352536653f16249087d3752f973db1dc8681fad7c0f1710cb1a71f0d9d2cc3897c2e125340e0bcf685db012b627aed358c26f4d314b1222f81b07658b38aa |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 23fa802d9ee383133a1c1ec78196b270 |
| SHA1 | 20ffe228cfeb43dcf81eb949b8a4035b464efd75 |
| SHA256 | d55d6b374d1cd134eb81c5fbd018483044f6b88ffd48b03c239ae42995aa63c0 |
| SHA512 | 1e024ff09b3a679c1f92b06de107cfaefa9fa78a49fd5bd682f7d032f8ec9a3df4883fd9365e6ef1b3745fe337292a2a6f42a0610abe7e1ee367c5fd1b0efbfa |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | bcdd66fde9abbff27141951aa572d665 |
| SHA1 | fe5017ad620af0d2586871b0aff4062633501f5f |
| SHA256 | 72ba749b0fce12c62fc08ad28a7c2d1a3a5a221942fa77b31d741f4f2a5650d3 |
| SHA512 | 27c352b4abec090fe5e0ae88dbc7dcf837df60245f4728097409a903506ba9c69ee9ed5db224a8a42f2fe32801d2b5efadb7d60ea2f6a15840d5fc7a5d8d0cf6 |