Analysis
- user interaction
yes - max time kernel
899s - max time network
533s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 01:22
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1522357363175194764/1535457007102992434/antiscan.xyz_decompiled.rar?ex=6a77d545&is=6a7683c5&hm=46b2749fb2f404675ae37d9e0bf6b582c735a5b961e154969875c3726a47e5ff&
Resource
win10v2004-20260513-en
12 signatures
900 seconds
General
- Target https://cdn.discordapp.com/attachments/1522357363175194764/1535457007102992434/antiscan.xyz_decompiled.rar?ex=6a77d545&is=6a7683c5&hm=46b2749fb2f404675ae37d9e0bf6b582c735a5b961e154969875c3726a47e5ff&
- Sample260808-brcmeafl4s
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4072 chrome.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306257476652811" chrome.exe - Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Key created \REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings chrome.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
pid Process 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe Token: SeShutdownPrivilege 3748 chrome.exe Token: SeCreatePagefilePrivilege 3748 chrome.exe - Suspicious use of FindShellTrayWindow 43 IoCs
pid Process 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe 3748 chrome.exe - Suspicious use of WriteProcessMemory 29 IoCs
description pid Process procid_target PID 3748 wrote to memory of 4012 3748 chrome.exe 84 PID 3748 wrote to memory of 64 3748 chrome.exe 85 PID 3748 wrote to memory of 64 3748 chrome.exe 85 PID 3748 wrote to memory of 4072 3748 chrome.exe 86 PID 3748 wrote to memory of 5012 3748 chrome.exe 87 PID 3748 wrote to memory of 5012 3748 chrome.exe 87 PID 3748 wrote to memory of 1368 3748 chrome.exe 88 PID 3748 wrote to memory of 1368 3748 chrome.exe 88 PID 3748 wrote to memory of 1232 3748 chrome.exe 89 PID 3748 wrote to memory of 1232 3748 chrome.exe 89 PID 3748 wrote to memory of 3904 3748 chrome.exe 90 PID 3748 wrote to memory of 3904 3748 chrome.exe 90 PID 3748 wrote to memory of 4792 3748 chrome.exe 93 PID 3748 wrote to memory of 4932 3748 chrome.exe 96 PID 3748 wrote to memory of 2884 3748 chrome.exe 98 PID 3748 wrote to memory of 2884 3748 chrome.exe 98 PID 3748 wrote to memory of 3652 3748 chrome.exe 99 PID 3748 wrote to memory of 3652 3748 chrome.exe 99 PID 3748 wrote to memory of 3988 3748 chrome.exe 100 PID 3748 wrote to memory of 3988 3748 chrome.exe 100 PID 3748 wrote to memory of 4304 3748 chrome.exe 103 PID 3748 wrote to memory of 3992 3748 chrome.exe 104 PID 3748 wrote to memory of 4144 3748 chrome.exe 105 PID 3748 wrote to memory of 1036 3748 chrome.exe 106 PID 3748 wrote to memory of 1036 3748 chrome.exe 106 PID 3748 wrote to memory of 1904 3748 chrome.exe 115 PID 3748 wrote to memory of 1904 3748 chrome.exe 115 PID 3748 wrote to memory of 1460 3748 chrome.exe 116 PID 3748 wrote to memory of 1460 3748 chrome.exe 116
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cdn.discordapp.com/attachments/1522357363175194764/1535457007102992434/antiscan.xyz_decompiled.rar?ex=6a77d545&is=6a7683c5&hm=46b2749fb2f404675ae37d9e0bf6b582c735a5b961e154969875c3726a47e5ff&1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3748 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc5d83c728,0x7ffc5d83c734,0x7ffc5d83c7402⤵PID:4012
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,10635885623316021893,3779946723732454336,262144 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1988 /prefetch:22⤵PID:64
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2152,i,6392056551296526285,5896520018517735315,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2240 /prefetch:32⤵
- System Time Discovery
PID:4072
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,9484017102187832939,2387194570582672228,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2716 /prefetch:82⤵PID:5012
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3164,i,12411120104750163745,15730844922386839915,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3168 /prefetch:12⤵PID:1368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3176,i,5939819800404099145,8536608103941435718,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3208 /prefetch:12⤵PID:1232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3876,i,12422892202246744343,5321696734690465730,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4220 /prefetch:22⤵PID:3904
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,292968506608175631,12786068003658841681,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:82⤵PID:4792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,10435910033011673721,17627960268636224445,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:82⤵PID:4932
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5684,i,7185064597079056336,10098528129206890965,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:12⤵PID:2884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=6024,i,13717346098907793574,14133518382157285,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6004 /prefetch:12⤵PID:3652
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6208,i,2675877322754236842,16417582452251585504,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6176 /prefetch:12⤵PID:3988
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,13675680280184760754,171689155645791675,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5512 /prefetch:82⤵PID:4304
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5800,i,15924933742135251307,3410681732064814538,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5684 /prefetch:82⤵PID:3992
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,367615995031104380,8346288868606759372,524288 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:82⤵PID:4144
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4732,i,17065630782143854919,15557955982166615469,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3244 /prefetch:12⤵PID:1036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4220,i,7337316963449105103,1095791696136943657,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4340 /prefetch:12⤵PID:1904
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5840,i,2104735830733771844,17178206845513219998,2097152 --field-trial-handle=1992,i,7989945899354771773,4103208234832785061,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5940 /prefetch:12⤵PID:1460
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2520
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4796
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3824
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 37ac86476382cea12a1a5e06765c90f758c622ce0b4155fb1f974e59c441fef8
- MD5 461fedc34979bed9f6479bc8b19b963e
- SHA1 3581f402f7c6a54932fdb1abcb4f807d1ddd52ec
- SHA512 14ee274a07cbec10605186dffe2d1cf035866f831f9005d78f6df870ee3742babbcc9a2250f20450084c9330ff85d6f91380ffe2574f52bdd5448c9d7493e478
- TLSH T191E02BB9CD62EC3718FC271864654745E78113176640984F3B3D450C8FB573A458685C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
- Size 331KB
- SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
- MD5 05ef8155cf66131654d3bb9c9cba5853
- SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
- SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
- SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
- TLSH T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 144B
- SHA256 d39fe8106895eee0201bf83e5d10233c01765117cf9a2e75ef6ace534e86f599
- MD5 6f3817bae499b34a2845749023d5d18e
- SHA1 ea1c2a767347ab4ac3a95bd6df4d22ea1094b450
- SHA512 137faf7b4090971832d8b6026c44afae863eae6076e77d95d8982a7ca72eecc9311c7642f5c606d2ae5f1cce16792123d915d233770bdd22542a8835e60f2adc
- TLSH T16FC0924A4182A906C36D42B1A6E2557221F429ED8B9291FA42D29D8E98B2A694B2B901
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 432B
- SHA256 1fdc3424b4c018c81ed960e93423a8c60b571454b0d3dd78ab640cd2ae5ad047
- MD5 17a0e64f67ab5ecf2bb4194eb41ba8da
- SHA1 17fcb47d9125fba560a19f3f6587e02004d3d4e8
- SHA512 feb3fcb2f3307eadcc571a1dfbcdef1e92608e6a69a9076e2ff1879add6f3f66dd0f34191232fde7fb3cad2649563cee3fb2c9435aa579ec7665643cb54bd41b
- TLSH T14DE07D1010924D8DCFD442F196F7145365D00CFDC352329E01C18FED6DB677D45D5500
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
- Size 264KB
- SHA256 96c80635480b93abb4e8f1559986ec715e70b233c26462b27649e516c4af6ab0
- MD5 f51732dbb94d4947e73b36b4dee6983f
- SHA1 a0ca3cfffd3fa47c3f4cd51a36316006a3888a59
- SHA512 e39e94f61049bc242a9254127ec729081b279688b0bf353687d78b670634ec900b6f5172f5d545e233911699da96dbfe1070f5cd84032e2dfc82a437849dc98b
- SSDEEP 3:MsEllllkEthXllkl2zEFbw7X:/M/xT02zPX
- TLSH T1C4440404FFC00C05CD0110704551C37113F0D4D00735D74734550C17DDC75C00C00000
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 5KB
- SHA256 fc13ba8181c5deafa77d2b12ee192f584b219172453887cd0962d33823943e3d
- MD5 2280063d77efb60d04ebb5ec589d6b58
- SHA1 5cce914afaf803c962f12eabe071b5e0efc87320
- SHA512 ee7685e98bfd5e1ca649794246f29327c972edbb33111558725073df27ed877ba89a79cc07a3f3be7771590c4899d92aff0ed53e6c01f6765b2aad9742d8f4da
- SSDEEP 48:YALlhGqihVhxhKhJhQafo7XLsHgmzsC1ts2fssosDfKsJqzs8tsy1cs6BsecFsmm:DwZPXQbGaaKF19BTncf1W5ctxNPwhKPW
- TLSH T184C1B0F7C3D8C53DC91156F8AB156F1FCE2A0A14432C3C26C9D9AE5B93E2871E22124E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 5KB
- SHA256 2367fca5cc36f24ff24ffc9a434b4ecfeba61df9d4942eeec53a5958c1ab8bcc
- MD5 f5d3ca4c5438db6a5f33a13ae5c26309
- SHA1 3cff5bdcb3a983d4fe4ec731f2c152f49085d26a
- SHA512 3c716f42e3349d3c1c021701885a8d3aebb3533c1d36db4fd8177a9b10a5aebef73c4224895d53ad32fde5d7c3fde2339aee0180219d395c401bc20347772a9a
- SSDEEP 48:YALlhGqihVhxhKhJhQafo7XLsHgmzsC1ts2fssosDfKsJqzs4+s8tsy1cs6BsecX:DwZPXQbGaaKF19BTnYCf1W5ctxNPwE
- TLSH T1F0B1AEF7C3D8C52DC91156F8AB156F1FCE2A0A18431C3C26C9D9AE5B93E2971E22174E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 519B
- SHA256 297287e7e8bf3e50c3743a6c412b3d55a6a7fe4de03ce59e90945275ee96a712
- MD5 db98bf5181cfede9b19597468533c088
- SHA1 422dc9a3de9dd20fdcbd106045c9179f84668dea
- SHA512 105580f42362cf92f7a07d159d8dc78fc34f783445d0169505946b3b73acc8ad1202489b4ea707e8996196c5fbf05b1a76c8222a64b6dcf834088291c4c6d556
- TLSH T116F059BB977A702310B904BF1D047C4E2576A831054068E4CF5B816CE0D48F30B1245B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 f955ae17c8c98edcbe370c8111896b858d459f845f7dd00026b2c068e03d825c
- MD5 f74c2ca906bbdf90595ec8078e6eeb29
- SHA1 17f57b1764a08e3ec225073c49eece5643fca82d
- SHA512 7a054e6aec779e8cc6440830d7a0e81246077f66885827ffd4e6b5743b64baeb6802b1b59efcde075b55a82a7b37f20ff84d151939dd5baf910a46d8db5c0df9
- SSDEEP 192:FRp5IKkqeDxqsv7MF+pAPRp2S9HHsb+WNnznP8kEw0kw4mIajVyIsnAUge:FRp5V14goUX91wTPVENYzaFe
- TLSH T15842F96EED15797B6CDAC21AFD267B53D7F5102121D42E84EAFC892C14E76CC222701B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 a6832c7306e885f825da37d351817bdfb54d7e996003f6943775d76b7930324f
- MD5 4299117e384924d389d3bc2d6f6a9b3a
- SHA1 79c59dab57f4a5523d263deb0eb56817a7e5cd8d
- SHA512 10c4a9b7adaa5aef5efac85c2b846254656c26d00c1e959759af6d1bfc27d09a90c9cfd83605e8c61fea0a5733a6d053dffdf41c3149c5ae0d94cc6d95c1f362
- SSDEEP 192:jRVcBz5IKkqeDxMsv7MF+pCPRpjz97dR9HHsb+WNihtAg4zXbbD2vkEw0kw4mIaZ:jRVmz5V14goqXNP1wCcz28ENYzaqE
- TLSH T13462C86FED216977ACDAC219F926BB67D3F5102221D01E84EAFC892C14E7BCD2217057
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 6195d549d4a10a1c3129753c7a62361478f27d053a72a8830fa6cc9e86f33040
- MD5 ea758e1ebb226c6b96e6fee84ad16be7
- SHA1 facfa259a8eb7fba0838b5eb0c230e27bbaab525
- SHA512 a69f8f6385526dfee505bfe4902c170c90d70581470a27839227cb7d348597abf5b4a36f349783e93d9f02f67f3f8d88c62ebbaacc95f3c51848139c469fe154
- SSDEEP 192:jRVcBz5IKkqeDxMpv7MF+pCPRpjz97de9HHsb+WNiqAg4zXe8kEw0kw4mIaiVyI4:jRVmz5V1pgoqXN01wFceVENYzaiE
- TLSH T19652D86FED21297BACDAC219F926BB67D3F5102221D41E84EAFC892C14E77CD2217017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 9c7eb61321dc1186abf31f0aa3fbccf865ced0604a9fa46ffdfd1cae2cadcf79
- MD5 0fb314a70a02f2c9463beabcdc9b5982
- SHA1 60594e0cb4c71992e9df68a43820939e8bec73cf
- SHA512 81f2aa52a4a8c12cb1e7b9578d41d527eab486e7c1a18eecf4e5e41af8823a19f3d3ea84954bcae026e54c6857bdd1b2f287d284bb6ba4cd0ac25fec819a225f
- SSDEEP 192:jRVcBz5IKkqeDxMsv7MF+pAPRp2z97de9HHsb+WNiqAg4zXebkEw0kw4mIaEVyI4:jRVmz5V14goUXw01wFceoENYzaAE
- TLSH T1EC52E96FED11297BACDAC21AF9267B67D3F5102221C41E84EAFC892C14E77CD2227017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 73bb498cf5f5b985c38a217b12a5dd6e42f6779b1fa949deff6ba3c6fa12b551
- MD5 26774f09ab6c682f354d076cc268edea
- SHA1 958aa3620adab84d5e315f3954ace2cf108395a7
- SHA512 82d7fe6077ea6a4f149cf561c4614763e7d330e0770915ee93bccd9db5dfa4fcb6bd14bade609df9bb8759dfd6ad1a4ce58446a2156425a5ba64b396bc9d3a97
- SSDEEP 192:jRp5IKkqeDxMsv7MF+pAPRp2zvL9HHsb+WNnAg4Rp2xkEw0kw4mIaEVyIsnAUgE:jRp5V14goUXW1wLM2mENYzaAE
- TLSH T1FB52D76EED11697BACDAD219F9267B53E7F5102221D41E84EBFC892C14E76CC2227017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
- MD5 73285efb9f7ee0bd384426865ccccf8e
- SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
- SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
- SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
- TLSH T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 a9fe1653ddeeae1d67e82e02bc6022c42acc6610fef3405c9906ea8e9597de46
- MD5 0dcc406e2723de138f061f6832cdee79
- SHA1 70a18408129dd935397f18f85195da965ba42f01
- SHA512 8e905834da69d0dae13efeb07db275e150945c60358f2e2270561e5073eead33752676cbd85a77a85c9dd33bcb7a21f0817ba2133563ced273c7afaaeca1ffc6
- TLSH T1AFB0124080415101C01206F4124614D87A249F10E70B1B0543E469678829260C42C171
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5885a6.TMP
- Size 96B
- SHA256 1b63acce90234d3706957132f09e03da7e8db6019f70d8e9ef24624dc1ec3be5
- MD5 da81c883e71ed76172509b8f0063a15d
- SHA1 5bfd5151709ea292bf580cb61fe64effc7132208
- SHA512 cd93e40eb25362f3ae7438d4b03501c68ff409a8e7e532912da3ef919838df73127b9ea417831dc7e568ae3613620b5419c650a68786d4f2f94e7d8c533a36a1
- TLSH T16BB0228CC2023222C2C203B02880B0CC30A0EF30EF83020382E00E2ECC2AA20802822C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 72B
- SHA256 aef6d50f718e5479b43b9988dbb5ac5b92c87739b9543c8ad250983afa210936
- MD5 81761a99706aeaf4d23915027b219adb
- SHA1 3efc3d1db34978b108cbaef238ccc3ba6f3b2d25
- SHA512 00035884242675407a7d376c2bded683cee74abb531091189b43830d53cfb86d3e6b96c8c0610d7c72f2b119bab6037dbcf3f0800b85f4e0fbc76ade21c1643f
- TLSH T16BA002382B544522C4094BB06197414237514DF0D3921201509040548D51197C176959
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 ae963ac0f38c6368370262d472efc9fa3d1d2095d959aeea87579ee7884a53b2
- MD5 3d1c618162c24fd3615282e88e0b26af
- SHA1 ea7a3e810ecff42a45cab8e3554bf54be935edb7
- SHA512 7ae67b9bdddecec6c64751a82b188bbbecff9017dff34016c06473c2594367ef5499c7266532c17088e86c7c562f04fa13b21d57a6781c2a5f2b9406fdda1d91
- SSDEEP 3072:DEGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Dnm7Rkm1tYpBeh2BAoM
- TLSH T104C302375D75A83758B9BB1EB08E0A1F1EF14AA7D830DE52C8D85B0427F97CC1A45934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 132KB
- SHA256 5e2a0fdc5915648654938928268078aa21444a3dd7f9c80f94857fdb2678ef1d
- MD5 e6879d4d55f615b5c270fa7d6b14573b
- SHA1 7cc127297a8c7dfae5b86e1472fc311c46c3b1e1
- SHA512 63bb0e3a1ca8198087b339fb65d8ddacb1d333db1e1c555ecae422d3cc7b63ba855d7a71d0169a792dc0a1ac50791a501e8ddb6ae060ff18245da4047fd68a3e
- SSDEEP 3072:DykglGuLHsGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Dykg4uDm7Rkm1tYpBeh2BAoM
- TLSH T121D312378DB5A93758ACFB1EB08E072E2EF14A57D9249D56D8D96B0473F93CC1A08930
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 0f85e416132769a9166a015a6f68d9e03efdc265a5da4d27bffeef6a7798098c
- MD5 a8c865eb10dc23955c05ff087cddf308
- SHA1 7bd49c54e787fa78f7e4f7b6584384a746999e19
- SHA512 2581be86b5236360004f9ca259df6420458b0fc581c157fc45473254fded3862927ff5c3919a3b42cad50188586e264b87c719eaf2f19c8652225e0396d10f56
- SSDEEP 3072:/5Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/4m7Rkm1tYpBeh2BAoM
- TLSH T1B6C312275E75E9375879BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 ac11c55f69ba72fa0c62a991af09cab5a0db03aab6e464b8f9be0d5a63e9c6c1
- MD5 5fb1c0b487b3e5104d65846e6917a92e
- SHA1 abfc9c27ba0047e660214603f33e07ec249bedf1
- SHA512 665fce8fed6581fedfcb71c84023ba7684951acd4a672f8ad7f7a84edd2e5b7dfff0f186f3f4267ac0fa7a40b1f6a859c5ac7877101c6bfd892b47e805e9ca29
- SSDEEP 3072:DQGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:Dbm7Rkm1tYpBeh2BAoM
- TLSH T11DC312275D75E83758B9B71EB08E0B1F1EF14AA6C830DE92C8D85B0427FA7CC1A49934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 1c6a4c9c947492bdc5c0d2780d4e04bfa5b21749755a62ec39b7f63e9e274f26
- MD5 3e0e25e1b199e8428406dadc5c4d64ea
- SHA1 47bb4f8ebd4eb8c4d2c856ee29cafedf00812b8f
- SHA512 3d27f8235de6eec0ad9d27b69cad2b32c3a7025db868d71a51ceb85d363f14f6d1c717c16d0bebb7ffe44c7ffb1c99384dc938fb4dd8ed2e4573179b6e195087
- SSDEEP 3072:wLGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:wSm7Rkm1tYpBeh2BAoM
- TLSH T196C312375D75E83759B9B71EB08E0B1F1EF14AA6C830DA92C8D85B0427FA7CC1A49934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\antiscan.xyz decompiled.rar.crdownload
- Size 8.5MB
- SHA256 1b988a604f98d0cb3eb617863876776284141c2d8ee97bb4e7f383053a01010d
- MD5 66612cd87334a6f74ade786a8206b220
- SHA1 a654db7466b0ae6ea9bf86bf24b548307754db9a
- SHA512 bf9fe00cbdaf574baaa96bbb351e9df8f71e0738e507c97cbfb88f549194f3e595ce58392ec3e5edc36e42fa7a5b65f0f8d0988dc83252ec19ce924a909a02b2
- SSDEEP 196608:trLnB5NLKgEQJjhg+kgAl9xeRLVe6Wb6DbKDAsa/FZot:VEaO7vHTX63KVcFs
- TLSH T15F963361D6A26C3DFDE50B28AEDE04B20585633C765C9122915CAAF3BA735CEFE31314
- MD5 SHA1 SHA512 SSDEEP TLSH