Overview
overview
10Static
static
10The-MALWAR...er.zip
windows10-ltsc_2021-x64
1The-MALWAR...00.exe
windows10-ltsc_2021-x64
The-MALWAR...ta.exe
windows10-ltsc_2021-x64
3The-MALWAR...na.exe
windows10-ltsc_2021-x64
The-MALWAR...mb.exe
windows10-ltsc_2021-x64
5The-MALWAR...en.exe
windows10-ltsc_2021-x64
5The-MALWAR...bi.vbs
windows10-ltsc_2021-x64
10The-MALWAR...mr.vbs
windows10-ltsc_2021-x64
4The-MALWAR...ll.exe
windows10-ltsc_2021-x64
6The-MALWAR...ug.exe
windows10-ltsc_2021-x64
6The-MALWAR...le.exe
windows10-ltsc_2021-x64
3The-MALWAR...an.bat
windows10-ltsc_2021-x64
1The-MALWAR...er.exe
windows10-ltsc_2021-x64
3The-MALWAR...n.docx
windows10-ltsc_2021-x64
1The-MALWAR...er.exe
windows10-ltsc_2021-x64
7The-MALWAR...as.exe
windows10-ltsc_2021-x64
3The-MALWAR...ve.apk
windows10-ltsc_2021-x64
3The-MALWAR...er.exe
windows10-ltsc_2021-x64
The-MALWAR...ce.exe
windows10-ltsc_2021-x64
3The-MALWAR....C.exe
windows10-ltsc_2021-x64
10The-MALWAR...Lz.bat
windows10-ltsc_2021-x64
8The-MALWAR...ou.exe
windows10-ltsc_2021-x64
3The-MALWAR...MZ.exe
windows10-ltsc_2021-x64
7The-MALWAR...um.apk
windows10-ltsc_2021-x64
3The-MALWAR...st.exe
windows10-ltsc_2021-x64
8The-MALWAR...er.exe
windows10-ltsc_2021-x64
8The-MALWAR...RC.exe
windows10-ltsc_2021-x64
8The-MALWAR...re.apk
windows10-ltsc_2021-x64
3The-MALWAR...or.exe
windows10-ltsc_2021-x64
The-MALWAR....0.exe
windows10-ltsc_2021-x64
10The-MALWAR...z.html
windows10-ltsc_2021-x64
4The-MALWAR...er.exe
windows10-ltsc_2021-x64
Analysis
- max time kernel
900s - max time network
903s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
22/02/2026, 01:58
Static task
static1
31 signatures
Behavioral task
behavioral1
Sample
The-MALWARE-Repo-master.zip
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
The-MALWARE-Repo-master/Trojan/000.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
9 signatures
900 seconds
Behavioral task
behavioral3
Sample
The-MALWARE-Repo-master/Trojan/Alerta.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral4
Sample
The-MALWARE-Repo-master/Trojan/Ana.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
6 signatures
900 seconds
Behavioral task
behavioral5
Sample
The-MALWARE-Repo-master/Trojan/ArcticBomb.exe
Resource
win10ltsc2021-20260126-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral6
Sample
The-MALWARE-Repo-master/Trojan/BlueScreen.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral7
Sample
The-MALWARE-Repo-master/Trojan/Bolbi.vbs
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
29 signatures
900 seconds
Behavioral task
behavioral8
Sample
The-MALWARE-Repo-master/Trojan/Carewmr.vbs
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
13 signatures
900 seconds
Behavioral task
behavioral9
Sample
The-MALWARE-Repo-master/Trojan/ClassicShell.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral10
Sample
The-MALWARE-Repo-master/Trojan/ColorBug.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral11
Sample
The-MALWARE-Repo-master/Trojan/DesktopPuzzle.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral12
Sample
The-MALWARE-Repo-master/Trojan/DudleyTrojan.bat
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
The-MALWARE-Repo-master/Trojan/FlashKiller.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral14
Sample
The-MALWARE-Repo-master/Trojan/Frankenstein.docx
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
5 signatures
900 seconds
Behavioral task
behavioral15
Sample
The-MALWARE-Repo-master/Trojan/FreeYoutubeDownloader.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
10 signatures
900 seconds
Behavioral task
behavioral16
Sample
The-MALWARE-Repo-master/Trojan/Gas.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral17
Sample
The-MALWARE-Repo-master/Trojan/Grave.apk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral18
Sample
The-MALWARE-Repo-master/Trojan/HMBlocker.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
9 signatures
900 seconds
Behavioral task
behavioral19
Sample
The-MALWARE-Repo-master/Trojan/IconDance.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral20
Sample
The-MALWARE-Repo-master/Trojan/Illerka.C.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
10 signatures
900 seconds
Behavioral task
behavioral21
Sample
The-MALWARE-Repo-master/Trojan/L0Lz.bat
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
8 signatures
900 seconds
Behavioral task
behavioral22
Sample
The-MALWARE-Repo-master/Trojan/LoveYou.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
900 seconds
Behavioral task
behavioral23
Sample
The-MALWARE-Repo-master/Trojan/MEMZ.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
25 signatures
900 seconds
Behavioral task
behavioral24
Sample
The-MALWARE-Repo-master/Trojan/Malum.apk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral25
Sample
The-MALWARE-Repo-master/Trojan/Mist/MistInfected_newest.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
5 signatures
900 seconds
Behavioral task
behavioral26
Sample
The-MALWARE-Repo-master/Trojan/Mist/MistInstaller.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral27
Sample
The-MALWARE-Repo-master/Trojan/Mist/MistInstallerRC.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral28
Sample
The-MALWARE-Repo-master/Trojan/Mobile_Legends_Adventure.apk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
900 seconds
Behavioral task
behavioral29
Sample
The-MALWARE-Repo-master/Trojan/MrsMajors/BossDaMajor/BossDaMajor.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
22 signatures
900 seconds
Behavioral task
behavioral30
Sample
The-MALWARE-Repo-master/Trojan/MrsMajors/MrsMajor3.0.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
10 signatures
900 seconds
Behavioral task
behavioral31
Sample
The-MALWARE-Repo-master/Trojan/Offiz.html
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
13 signatures
900 seconds
Behavioral task
behavioral32
Sample
The-MALWARE-Repo-master/Trojan/PCToaster.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
9 signatures
900 seconds
General
- Target The-MALWARE-Repo-master/Trojan/Offiz.html
- Size 2KB
- Sample260222-cdtt7sb16e
- SHA256 d0806a3f935b9ca64041102958975f4b66d9cedd843b1f48bdc9e38d2f559bba
- MD5 3ff1855e571558f709d7b69f1fef3e1e
- SHA1 ae26203998506ff223ecd7b5f82c945a5f5e7d77
- SHA512 85773239ad953810796789d60436caff5d98dd2ccd5db0e00e362835c327756653b4fc1de67648a11d8a36972d384a69cffcec06fe078e9e252e1494d672e2a0
- TLSH T16D51468CB5A16046842A6A754BEBB61473F09003A254D841BB6CC5E0DFB42BFBB15D4C
- MD5 SHA1 SHA512 TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp chrome.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2588 chrome.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134162002337845142" chrome.exe - Modifies registry class 4 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428 chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 928 chrome.exe 928 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 412 chrome.exe 412 chrome.exe 412 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe Token: SeShutdownPrivilege 412 chrome.exe Token: SeCreatePagefilePrivilege 412 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe 412 chrome.exe - Suspicious use of WriteProcessMemory 19 IoCs
description pid Process procid_target PID 412 wrote to memory of 1356 412 chrome.exe 84 PID 412 wrote to memory of 3768 412 chrome.exe 85 PID 412 wrote to memory of 2588 412 chrome.exe 86 PID 412 wrote to memory of 3768 412 chrome.exe 85 PID 412 wrote to memory of 2912 412 chrome.exe 87 PID 412 wrote to memory of 2912 412 chrome.exe 87 PID 412 wrote to memory of 2264 412 chrome.exe 88 PID 412 wrote to memory of 2264 412 chrome.exe 88 PID 412 wrote to memory of 5204 412 chrome.exe 89 PID 412 wrote to memory of 5204 412 chrome.exe 89 PID 412 wrote to memory of 6068 412 chrome.exe 91 PID 412 wrote to memory of 6068 412 chrome.exe 91 PID 412 wrote to memory of 2080 412 chrome.exe 96 PID 412 wrote to memory of 2764 412 chrome.exe 102 PID 412 wrote to memory of 4424 412 chrome.exe 103 PID 412 wrote to memory of 1004 412 chrome.exe 104 PID 412 wrote to memory of 928 412 chrome.exe 105 PID 412 wrote to memory of 3868 412 chrome.exe 106 PID 412 wrote to memory of 3868 412 chrome.exe 106
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Offiz.html1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:412 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ff8293fc728,0x7ff8293fc734,0x7ff8293fc7402⤵PID:1356
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,16435159102800139931,12948453812800032993,262144 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2120 /prefetch:22⤵PID:3768
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2012,i,8010578302025047157,11863210148818250783,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2196 /prefetch:32⤵
- System Time Discovery
PID:2588
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,16659026362228648852,4480483417985207863,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2572 /prefetch:82⤵PID:2912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3176,i,16255330841097168923,12359459098087435250,2097152 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3200 /prefetch:12⤵PID:2264
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3192,i,7150215620152969421,12580424734265782144,2097152 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3236 /prefetch:12⤵PID:5204
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4308,i,9066816293803082265,3485689545775343857,2097152 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4320 /prefetch:22⤵PID:6068
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5268,i,10172111076963594655,2226034158103855979,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5276 /prefetch:82⤵PID:2080
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5284,i,3734529133601110258,3502557930259138520,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5528 /prefetch:82⤵PID:2764
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,9777083118829668684,547790058628966557,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5452 /prefetch:82⤵PID:4424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,1541886937677985559,7928379505076984451,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5304 /prefetch:82⤵PID:1004
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5500,i,4369113186500390580,5525992231821609867,262144 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4344 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:928
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=1228,i,11819987756197297754,8997646753019070225,524288 --field-trial-handle=2124,i,7488819014665465508,1420786042714328491,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4600 /prefetch:82⤵PID:3868
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2328
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4676
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 649B
- SHA256 e785bdf16f567bce8d089b6100fde2ed5a7659900de403528b14d9a3d99baeab
- MD5 2f0f8e53aeaca34eff23325687253e6e
- SHA1 7c9ba01169fc3733234ca8cb518f8375df11be02
- SHA512 8a64a26aef7fd6815c253f66c86ccc8f66a89a274b0298150bc5ea6bed5c7a5ad6fbedd01b2289b18d0628045a4572e30272b2842197530c45ffc6c8a6cbf04d
- TLSH T10DF0F965D831AC3714FC1B2D60A50B4BEB5113173B50988F3A3D520D4FF4A7B8686C2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 3KB
- SHA256 0f3996164cf8889d5c9956255ab7251108f0c5f76c807274c74a07cb661e8371
- MD5 0073e7bb4880c0ad30183683e437fde8
- SHA1 fe7b60f2a51b9f255d7f26d30839fe8fb2a9829d
- SHA512 d690001c7ffea671e7e5273d62490d14d95ae80b18ff9273662bd78dd1a2eae540d8d69bd5fd860dfd24d90477c8feaa9295f56194cdfe7a7478cd2491c2b5e8
- TLSH T1D7618DF7C7E8963D890195E4AB252F2BCD6D0914532C3C5BC8D49F0F93E58B6D24054E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 b476265366339ee03fe2f731d08d425a064fc102b1ce1857c84c7cf12d9186f8
- MD5 0b0d68806573205d4de229872c30e3b3
- SHA1 12bd8c88624679f8526802f42077ed458e2ae7d4
- SHA512 aee318cb8ab761a80b0c578a46668781a2597f8a6b0c93c1b361bdebdcf0374e2a9bed38b6837aa3c5a107bae77e0592e1becff8f089c67a30cd09ae35a40d00
- TLSH T16F519DF7C7E8963D890196E4A7142F2BCE6D0914532C3C5BC8D4AE0F93E5CB6E24065E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 3KB
- SHA256 ef36a29b33b87b6e99b0f898a6f230aa3f4a3ba6a9630d7c3f30ff6f240ed30f
- MD5 df9d190cac924fde49170804fc27d93d
- SHA1 2bc2e20c4fd7ff016b9c1754de2a0399ead9b1bb
- SHA512 3203ba1467553e816e2c0b18e7730874fa3df931bdd7b0f03a438edb819eec4d3873d4a339f20a183239aff055a6854f84428e245371cc8a5445d4d6c6ef68ad
- TLSH T19D61AEF7C7E8963D8A0196F8A7252F2BCE6D0A14532C3C57C8D4AE0F93E58B6D24054E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 523B
- SHA256 bfecbccdeab86d8c3ee2e1f921874fc473950ecddb8a47abfcbe670e8779e36f
- MD5 5970296e258dd4015443a0c6988c9358
- SHA1 2d3fc873d4657c904e42f902ed19269c955a917d
- SHA512 d83ff994ff4c88a9c39d8a7123d97edccd1117c925c835ddadda6af5deadb22eaa60b31c30450f261221df1c9cdd159eb508f088debffd01de6f7c08c7bab4e4
- TLSH T152F024A7EA7D7C67106C4DA63E00B80AAC759835068028E0DE9E816CA0449E72B83017
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 bf7a55cf6c08332da4ff34e5b5a363d82e6dbfc616d70ec14ac02a4587532b70
- MD5 9f3fbe45874d393f582b5d5d941e66c4
- SHA1 863388f95e661e7d562097a2667c15cc1913483c
- SHA512 bf9f9a2cc088513d7b71a7fccc7e3187a07a669f6d6e06380dcb7bc5b574515b616795788d803441a64993f500efacb1c785168b1a06824848dfbadfc6088da0
- SSDEEP 192:CRWS7VRuSQh9D505YzWv7opAPRp2WWq19sHsb+WNnWIiPi+4ebsQXzVyIsnAUge:CRWS7VRuple5YzisUXiq16wWpPiutVe
- TLSH T16D42A32DAE14753B5CCBD269F9667A57D7F6142570902E84E6FCCA1C00EB9CD221B01B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 176cfb5ac16e0b1daf5418699208be97daa553c4c518bdd2499008fd066dd8ae
- MD5 d77320868161489eb0d6dba490e7c32c
- SHA1 797c19eee552ec1d81b9009b16d3f2ddc17d01e9
- SHA512 22501360ea5ff10bcb2f373727228c544ae826892f48775f8f222d5bb38eff792b63e1ccbcdf4fb6aff32979480d646abaa1623851fe179782feffe8aacd9db8
- SSDEEP 384:CRWS7VRu0le5YziseMXn1q16wWpP6u+VE:BS7VRu0le5YzDeS1M6wWx6u+i
- TLSH T15642A329AE14753B5CCBD269F9667B57D7F5102530902E88E7FCCA1C01EBACE221B017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 3d93d7e83d2d6212112a97e8d679e4fb22ec907c21584671cc7e50b9310eee23
- MD5 25b7ed0ab9c3386b0a97de6e6a43c597
- SHA1 ca1a25d795bdffaf98824848e4bfa3025b20c297
- SHA512 df5e048a4d29095a6582e1f16e3c9d3c22d791f4a3c3d21efb7bbb347d3b87e1a410762945190f1a68eb34245ed35ab4683b8f810094c40ea974936f4e425351
- SSDEEP 384:jBj/a7KxkXqKf/pUZNCgVLH2HfgslYn7pLuLcifVQXOD/e+ErU3FRHGLL+vV5bsc:jB/a7KxkXqKf/pUZNCgVLH2Hfgsin7pi
- TLSH T17E7209676C4C9E7B0F94C6CCD8267E4FADB5024B61EDC86452FA981903D5ACF110A2F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 30d98294156e7d0610526c9c269da567c2730ff9fa7d5d311bc987eeae6eea4f
- MD5 52cf6460997a6a32c22a9ff27faac120
- SHA1 3d2a1676c4a20fbd9dfcce811bb6620acf81927c
- SHA512 10f0002d7786e066ef1535b84774736474afd0ab4c37a166356b6727e62e5fda79fd20aa0099a98e3096388653246d158d32780f469c79395596f066d4490672
- TLSH T1DDB01210C1025601C14302B81382048C31549F10C706130153E8AAB1EC261E14124260
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe584e2b.TMP
- Size 96B
- SHA256 69595513b2f50815c16ffc6700d8a329adc1b52946098be503ace9f9821c23dd
- MD5 1a12bc0129a2c81a64e55aa3aa50e722
- SHA1 6adaa089ba9382397ed6834bf3f3e23d2b7919d5
- SHA512 659b815a1c1a5d096560d94c29a0c64ecfe097ab65990ee242825dbf198e808026ee30de4ff3e9d5adfa69c5c6872b634a746995551014f7ff66b9ad629fc9df
- TLSH T1B4B02200C0022202C0C30BB22288C0FC30A0CF22CA030203A2E00B3AEC233320C280A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 c7a46ff8530c61a8f6db46ac9899004034c6e6ba6e75854e7ba454f69d42f473
- MD5 a278fe634f0242a71fad9f698a9cbc0e
- SHA1 8fdeaa21ed439f0434ecf65c31056e6b67a08ed9
- SHA512 d3ff183194782592e0c0369a3603c44c3d6d89ac5ee2b696457d5b613294fa4b81206f4c0f76b2a80bb3064f1fd28c0ddf983b26d18a5855cf69972ad358ded1
- SSDEEP 1536:3SWUeUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frp:xUNL3dkAdfifD0jj+sxdhdenFnHYZxXv
- TLSH T152931278616808BB8128C2C6726F3D5BC77D6D9A96642F7835F44D6196D0B8C0FC741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 ebf3dcead2ab3e040fb6c436e0537df8ec3468ec41a9e7eb38f0695fcf09b89e
- MD5 48cf558f85db7ea4d1667e0d6b8afe16
- SHA1 13761c95c5e5f99a149e0c82118ee71aac443f97
- SHA512 c5008c83eb0adb4fdaed48e871e0d904f4b52d2d0705a0a240549b8525894bf60b53842e49e2444e18181ff0d4831f99b57530add63655bb49392cb032ec86c8
- SSDEEP 1536:3SW0eUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frp:x0NL3dkAdfifD0jj+sxdhdenFnHYZxXv
- TLSH T13E93127821A808BB4518C2C6726F7E5BC77D6D9A96642F7836E44D728AD0B8C0FC741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 90KB
- SHA256 dab81f013e6d66e5f089f37a89d7fad0200ae65492a8523fc8c14e707e83256b
- MD5 1e36f246af710d9be72588147b91e282
- SHA1 1be2b4a4c3e218ae06df351e415f689a001663d1
- SHA512 fc357bc5bf950b5c680e4e5eedff76e1b9e78c4226f4e61f7f1db8d03694a291743c83800be8b8fb4387835cd5bdf279db8f78f5dda7aa5280fa76f48069e80e
- SSDEEP 1536:KSW0eUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frp:s0NL3dkAdfifD0jj+sxdhdenFnHYZxXv
- TLSH T16493127821A808BB4518C2C6726F6E5BC77D6D9A96642F7836E44D728AD0B8C0FC741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 91KB
- SHA256 b768b9a9a951afe31f5580e04c64948461b2fa41272dd99a919a18a8aab3efa9
- MD5 b2aca984012d71c074a77afab527c890
- SHA1 878fcd06e0ec2f25bdeb257a9d4e49e0157cdde0
- SHA512 0faed3934dc7c960b25721f72b2559776c6188d894bbfa6b372306ced392e5d1b8bf757efacf88714c50d4e78fea0ba6660b42539330b928b4ee9937494c0d18
- SSDEEP 1536:TSWUeUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frp:NUNL3dkAdfifD0jj+sxdhdenFnHYZxXv
- TLSH T195931278616808BB8124C2C6726F2D5BC77D6D9A8A642F7835F44D6196D078C0FC741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 89KB
- SHA256 2fc08d233a882bcc033f9578036e3fbd096ba291edbdf9f9888e9bf7a235ac42
- MD5 4191b5e59328f5ed07577cbb4c90e773
- SHA1 b8ce33392c814c43757b3834f5c156b8c4901aae
- SHA512 29066d53119af953e912c2c933b2ae141610520b0d82691be5177a4d0cdea78337fea64eb2a1e22a1d8018db4984bd237e8c7b55092c520340573736ab74e3da
- SSDEEP 1536:KSWdeUL3dM3oP7D9jfHCfDqONrCjjIpsmodhdeAHmA5EFDptwKpyTtcHkxd19frp:sdNL3dkAdfifD0jj+sxdhdenFnHYZxXv
- TLSH T1C8931278626404BB4118C2C6726E7E5BC77D6D9A96702F7835E48D729AE0B8C0FC781F
- MD5 SHA1 SHA512 SSDEEP TLSH