Analysis
- user interaction
yes - max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-de - resource tags
arch:x64arch:x86image:win10v2004-20260911-delocale:de-deos:windows10-2004-x64systemwindows - submitted
30/09/2026, 10:33
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://www.sportgemeinschaft-wwa-in.de
Resource
win10v2004-20260911-de
10 signatures
150 seconds
General
- Target http://www.sportgemeinschaft-wwa-in.de
- Sample260930-ml1b3azepc
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4144 chrome.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 3088 chrome.exe 3088 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
pid Process 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe Token: SeShutdownPrivilege 4968 chrome.exe Token: SeCreatePagefilePrivilege 4968 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe 4968 chrome.exe - Suspicious use of WriteProcessMemory 37 IoCs
description pid Process procid_target PID 4968 wrote to memory of 1788 4968 chrome.exe 85 PID 4968 wrote to memory of 4144 4968 chrome.exe 86 PID 4968 wrote to memory of 2000 4968 chrome.exe 87 PID 4968 wrote to memory of 2000 4968 chrome.exe 87 PID 4968 wrote to memory of 872 4968 chrome.exe 89 PID 4968 wrote to memory of 872 4968 chrome.exe 89 PID 4968 wrote to memory of 1940 4968 chrome.exe 90 PID 4968 wrote to memory of 4724 4968 chrome.exe 91 PID 4968 wrote to memory of 1940 4968 chrome.exe 90 PID 4968 wrote to memory of 4724 4968 chrome.exe 91 PID 4968 wrote to memory of 344 4968 chrome.exe 92 PID 4968 wrote to memory of 344 4968 chrome.exe 92 PID 4968 wrote to memory of 3532 4968 chrome.exe 94 PID 4968 wrote to memory of 3532 4968 chrome.exe 94 PID 4968 wrote to memory of 1784 4968 chrome.exe 104 PID 4968 wrote to memory of 3252 4968 chrome.exe 107 PID 4968 wrote to memory of 5088 4968 chrome.exe 108 PID 4968 wrote to memory of 5060 4968 chrome.exe 109 PID 4968 wrote to memory of 4984 4968 chrome.exe 111 PID 4968 wrote to memory of 4984 4968 chrome.exe 111 PID 4968 wrote to memory of 3324 4968 chrome.exe 112 PID 4968 wrote to memory of 3324 4968 chrome.exe 112 PID 4968 wrote to memory of 3948 4968 chrome.exe 119 PID 4968 wrote to memory of 3948 4968 chrome.exe 119 PID 4968 wrote to memory of 1488 4968 chrome.exe 120 PID 4968 wrote to memory of 1488 4968 chrome.exe 120 PID 4968 wrote to memory of 4120 4968 chrome.exe 121 PID 4968 wrote to memory of 4120 4968 chrome.exe 121 PID 4968 wrote to memory of 1928 4968 chrome.exe 122 PID 4968 wrote to memory of 1928 4968 chrome.exe 122 PID 4968 wrote to memory of 4868 4968 chrome.exe 123 PID 4968 wrote to memory of 4868 4968 chrome.exe 123 PID 4968 wrote to memory of 4352 4968 chrome.exe 124 PID 4968 wrote to memory of 4352 4968 chrome.exe 124 PID 4968 wrote to memory of 3780 4968 chrome.exe 125 PID 4968 wrote to memory of 3780 4968 chrome.exe 125 PID 4968 wrote to memory of 3088 4968 chrome.exe 127
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.sportgemeinschaft-wwa-in.de1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4968 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb3b5fc728,0x7ffb3b5fc734,0x7ffb3b5fc7402⤵PID:1788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,9420563710256614142,10296354720855080836,524288 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2076 /prefetch:32⤵
- System Time Discovery
PID:4144
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,16004792571302127610,11926864155827017675,262144 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2020 /prefetch:22⤵PID:2000
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,9249513192665983902,4545914050532570039,524288 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2560 /prefetch:82⤵PID:872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3112,i,13398016424190093649,1012753805783633174,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:12⤵PID:1940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3124,i,15370801712405648230,4002740753658517643,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:12⤵PID:4724
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4292,i,16639684435004966587,11597816003633211005,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4300 /prefetch:22⤵PID:344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,10287188339251997976,4206042219797496339,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4720 /prefetch:12⤵PID:3532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,14936114326352344852,4260080620279346193,524288 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5696 /prefetch:82⤵PID:1784
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4908,i,15391457793558503790,5565394471316769063,524288 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4896 /prefetch:82⤵PID:3252
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4912,i,17578634666211254749,10967122331268243511,524288 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4880 /prefetch:82⤵PID:5088
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4920,i,17139156975459982821,12289711456982801796,524288 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5780 /prefetch:82⤵PID:5060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5780,i,4397748588348219833,684228814644264767,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4952 /prefetch:12⤵PID:4984
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4768,i,8884501075745830106,8356810139020166986,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4304 /prefetch:12⤵PID:3324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5972,i,1089344614522922637,1925094783864947967,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5996 /prefetch:12⤵PID:3948
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4312,i,5719865635165937322,14465226782802229665,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4232 /prefetch:12⤵PID:1488
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5944,i,5591971872195030528,10102393900096230136,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6096 /prefetch:12⤵PID:4120
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4360,i,1097109679079409016,1337563405535289043,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5948 /prefetch:12⤵PID:1928
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4752,i,7718595829888499668,18126687360920816415,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5992 /prefetch:12⤵PID:4868
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6296,i,4964197751893273796,12990973182804550365,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6324 /prefetch:12⤵PID:4352
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6240,i,3382247370681764502,10599898490518490696,2097152 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4784 /prefetch:12⤵PID:3780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4996,i,7365387285536375205,11051751356473827241,262144 --field-trial-handle=2024,i,11646446097613105412,4958304223295672885,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5936 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3088
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:3172
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4716
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 649B
- SHA256 78b9dffb5ce36bf1ea575c3eb66488d76c26687aa3cfd5e09e4a57f201a6b0fb
- MD5 b1e504709e4155d1dca1fcce613f79a0
- SHA1 960a67c2ee87f699117265a188eed3bf3fabc9ee
- SHA512 fcca39f43de2684ee0690008afce7b66fa1fdf3043ad36bf84922d036b73bd62c31edd23e157da8f6cde8c0d4adf3a1fc2dfd5acafc174ac7a6fb21318ff309b
- TLSH T158F0F4B5D822EC7B09FC075C64654B4AF79023673A82485B3B3D921C4FB463B469689C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
- Size 346KB
- SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
- MD5 fc31feb6dbd996017ba0751ebf1a2be0
- SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
- SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
- SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
- TLSH T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 1KB
- SHA256 47817e7c553b3e85650c8839797c0f4ac9733b561369dfc7dee7fe6ebff9aa50
- MD5 8cbafaa41bc7ed7c74b041ffafe281d9
- SHA1 3422700491906f526f9b5c54906876d2ef1754d1
- SHA512 e550b8d87df56244989f6ca10cd70da48af33d559c856b626ff9f7f63a43ff66d3d8fd02668ef046c8037022ad885cd3ca13cbed522faee29ecf57863c0fec42
- TLSH T112213D8121E878ACDFE8173AA9928C2117DC39EC0213EB0B885084273D3FBE506C53CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 3431fcd8fec9e0b7cf0b8baacc49aa8afb814c55759498418a930b46b600c4a4
- MD5 019741286caca33a3663f97e80a6d0fc
- SHA1 ea4e70a0d6667cd64ea78540b5c5c66993ac333d
- SHA512 c08592854dfb4c24fe9d57319dc076c54042a99779c49fb971df0fa1dd8f08e7e0431af1f46aa64fe45e00115db205fc7058546f18696c3f11051118f23e66b8
- TLSH T133416AB7C3E88A3DC90166F4AB156E1ECE6D0A54632C3C56C9D4EE1B53E28B1D30058F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 8f9cefec93e85d89a3a9166945da1b41777374d1a2a1b098135cdcd73043e5e3
- MD5 a7a05d877c84571c3d5d61ad4b3edec2
- SHA1 6507ae81fa619f28aa6e450c7fe7414b85964b51
- SHA512 87a376f5ac00faa09b18aa619b6218a8de40da9688379c92ffc52ae8c527de80b8e1835d06fcef9e80f9a7a28ac64708dcef851ab466edec92dc9d13e7bfa373
- TLSH T1B0416AB7C3E88A3DC90166F4A7156E1ECE6D0A54632C3C56C9D4EE1B53E28B2D30059F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 9KB
- SHA256 4b0575434563c08f03d52b5813b769ede2d6b8b138be9993cbb73b75a18ce188
- MD5 d992cc84cd789088a06c96c183c1e7aa
- SHA1 1864fef89b8bdbade0dfb4455587c324cee34eaa
- SHA512 8b0b8f745c0492d29eac37079b04b5af8ec17b08d9dbb00fbc4d86b4c15b7491929a49fe25fd5635aa2c59c9f8b0723d9f0a84b1b6d052c31e10975d40bbab9a
- SSDEEP 192:Dgi+ABwlFRJIJo2ZYE7kiGVgCTZe/pfRNFdQT+aPivYfPTNPomhgJadvE:Dgi+ABwlFRJIJo2ZYE7kiGVgqk/pfRNJ
- TLSH T13922ADB7C3D8C62DC81156F8A7156F1ECE2D0A18432D3D26C8D9EE5B93E2871E25164F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 8KB
- SHA256 3029568e9b010f2bb7f69ab7e8c9101a80651af3c2691fa70ba35f729f1ea39b
- MD5 6a260fcdbc62464b9011c2cdb182e919
- SHA1 10cedb425cbd34f62a7e8e66fe8b417a9f76d349
- SHA512 6ff70596f19b95c9197e892cf5cdbe4321d7aff4861615dd915915c479d9f0a918ed22db1fd418aad937138ec7cfa933961938a0e05f235774fb77b5db57f5c3
- SSDEEP 192:Dgi+ABwlFRJIBE7kiGVgCTZe/pfRNFdQT+aPivYfPTNPomhzbq:Dgi+ABwlFRJIBE7kiGVgqk/pfRNFdS+t
- TLSH T12302CFF7C3D8862DC85155F8AB156F1FCE2E0A18432D3D16C9D8AE1B93E28B1E25164F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 8dcb55ee3bc7c8726eebe6366526ecdbd11e6e42813dad4aa9d04dad6c6c35d1
- MD5 d6f60d4715c9326e539e703b2f5a8a00
- SHA1 696d775a13f5d15abd053c1319f19e71977eb5ca
- SHA512 9991e451a8fa2adc1fe49b215c192647f67d2f83c0f98597fc979eb7356d502226c37da6cb7c2ceeddabf03318ff76fb40e1af01c9c867c8db32f7cfc5d11ac4
- SSDEEP 192:NR4C6a5r0xOBv7VNDpAPRp2R19QHsb+WNnijaaveVQ6el2ip7b+VyIsnAUge:NR4C9SxORZxUX4WwCjeV42gH2e
- TLSH T10242932DEA60757F5CDBC22AFA267753E3F5102120902E88E6FD893C15E79DC2227417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 da792eb58d6cb7f6f6c53e87bc195f6b5becda9d220455ad4b75bd7c1912d5c3
- MD5 f0b176e8e816f15b43d3b87b5b79c241
- SHA1 04b53fb025c335e900e59dda16d48b3ae3d81a43
- SHA512 ade101c1fa715df9bd7210d5037a0e42a4af1b2c28838a7fed22803129dad441222cb6e23dd4efe5e055f0b1a8d682a621f82649f2cd36f5bdf7d382354356dd
- SSDEEP 192:NR4C6a5r0xyDBv7VNDpAPRp2R19QHsb+WNnija6v2ZQ6el2ip7b+VyIsnAUge:NR4C9SxyDRZxUX4WwCD2Z42gH2e
- TLSH T11042832DEE60757B5CDBC22AFA267753E3F5102120942E88E6FD893C15E79DC2227417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 cfdf1de7dac9b3b585337ce7dbd44e725d0acd2cfe8fd61dc1d69d18e44f2148
- MD5 f2eaabe864ad8bc412fcc2349756bed8
- SHA1 d26a9aa1ae07947b6c8be99ec81b69b34b59a608
- SHA512 9233b99f631523cf0aee09f92f8f84416c6824e5e8638a5c7684a1f9a1323f346174f93832af3a1a1eeacd234bc4214540caf25da9578ef4627c202c4ff28977
- SSDEEP 192:NR4C6a5rFxOBv7VNDpAPRp2hve19QHsb+WNE9u1ijZh2jave/AQ6el2ip7k+VyIQ:NR4C93xORZxUXnWwO7m0e/A42gw2vU
- TLSH T1B352A42DE9607A7F5DD7C22AF926B757E3F5102120902E88EAFD893C11E7ADC2213417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 871ef9e174412839c0b33eb58f29189cc43e118e3f402ff693fd10c6ee9cdf51
- MD5 fb5a62eeaf0671f3d5f512d50805c780
- SHA1 b809b4e490b4bb4eac3dda689b2e79878c4f93ce
- SHA512 bd472449a0c4cd1ba50be82c875ade9ebbf146af82f2984c12891c123f3ac930d25d80efaa6ce396378064c2c3ca0a35fe5cbb0f91ee573fa9fd0df2ca1367bd
- SSDEEP 192:NRQcBhC6a5rFxOBv7VNDpAPRp2huS19QHsb+WNE9u1ijZh2jave/AQ6el2ip7k++:NRQmhC93xORZxUXWWwO7m0e/A42gw2vU
- TLSH T12B52A42DE96079BB5DD7C22AF926B757E3F5102120902E88EAFD893C11E7ADC2217417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 14KB
- SHA256 76832b2f7c03dfc65b155b05b3946d7934c8375e918949c99e7daf2dbb74cfcb
- MD5 67d295c5d387e72bc4a7d0bfdc33574d
- SHA1 ee7206e82b1f3603c999bb0bd53625df0253a91f
- SHA512 22acec0b269aed32815fc0fc0bc14d761f85f49a34973161415a6431990078ea6a2feaf090e79c78b76d791eb1387fcb9fd1908c9b61a57a3d3009a9130cb57e
- SSDEEP 384:LljHG7KxkXqKf/pUZNCgVLH2Hfgsl++7pLkdLceShMXODHC+ErU3Hto5ww:L1HG7KxkXqKf/pUZNCgVLH2Hfgsc+7pS
- TLSH T1FD62F867AC4C9E3B4FD4D689CC177A4FEDB4025661EE886492FB982503E4BCE110A1F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 24c799440dc49f9750d48eba31ef08fa1682020b9dbf5a88b5b2d1bb92ed0651
- MD5 ac55ad91cedebf0e88e6571f51285620
- SHA1 7a0cdf0ee2556dcd8d07fb3bafc075db4911b81a
- SHA512 451070584ea5852815e418aaa8d119ce7a5517a0d6b12eb3363bd6f209b8cc59f2c18ece018354bf0c5a9b18c2ceebc3269610828be898c908e3e6fb9bbad1be
- TLSH T147B01248C4815701C00203F8295024C83154EF21B605231141F40E07D839950805B195
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe598236.TMP
- Size 96B
- SHA256 fd1eb7cdd1aa0e47e6cdfd491a09eda02b4a2848ac344a68180d6d38d66eaaa1
- MD5 6ab76394dac94a3e206fc0e09d322544
- SHA1 89691d2538e0eb99122d2842c9aad1da58f32b00
- SHA512 9c1568a979046e188e6b9ddf2633961abfd9e50f3d76e11554b077fe407dd19ecd4f7854ccc91691121a6468c6d27ce1196d4d3bddaf72a211a59826eac97cbd
- TLSH T1B3B0220AC2C2EB02C0C203B02882C0EC3020EF20C203020B82E00A33EC303200C20820
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\632801e283db11e5_0
- Size 193KB
- SHA256 47c963f0c14b65288641ebc4af67d764b2624f935bb819236a6c264e1e131ff6
- MD5 e1d008a93816cc89120e5d1d44870ef6
- SHA1 299d848fb140931a4c2aae7166b990998f414ffe
- SHA512 38e2d6c71861c0f84ee82b3f0758290f771820c7a333880efb557c41a102d831554a2060d2b2e58813d992bbefa3c56ab7031228395618322b8f2ee1457d3b63
- SSDEEP 1536:KoWVFWcK8jE3VIyj/OznBCj1O8/vrbIvUB/wIULnqSZEn7zCo5VeJUuBHvIKcb89:TrFWzBlGbIvlpYPIbPIf8XFjvyuVb
- TLSH T1BC145B755300E43FB923DE61A27E7F4E3C25A167DD0686FCA5A4E430AAD3DF20526B48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 120B
- SHA256 cf60f2ca85bf3857910feda276321772fdc4834d924fc2f6de22d961976cdacc
- MD5 3fac80f8cd0253d6bf2b2f8d73b0d3a6
- SHA1 022a8f723da8bad060466b9f4d1402bdb1dcb2c3
- SHA512 d5af675e9ee2c464d8ad64cb1c680be595cf2097bda7ccde3606bba109c76dea18f936ceb3cc61edef04236e79d1bd678611ba72ca876f83cb834a8b82eb53e0
- TLSH T16FB0127C60C0ED0CCC0091B291C5C8901110780157069A03A0B99448B50F1C38151005
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 130KB
- SHA256 04890a3658febdde06c10c2bf074012aaf35d2f86b4116fc1f6b8d392f291714
- MD5 d065b9c88852c34e8e671365ec9c6bd1
- SHA1 27d88b520d25208e42a667f6b1b04594bcd3dd90
- SHA512 5cf34900d4c41a394cbf7df8413805cc03cce007a5485080b4cc242fc53bfdaad4569754911fb19485eb50457021aecbd30a2157317385b1089510a405162f8e
- SSDEEP 3072:++lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:++hFD+7t56OD9ZfSApprr
- TLSH T197D31232AA95D9BBC9FC6541B157A300DE76A8ED41DE3A09444A5F8EE09FC4C0773A33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 94e0eeacef829f8ada414306d59097c4739ee61f935b46777018697dfc9791b1
- MD5 d107415c3a53d4d394c2e7eaa0edcfdd
- SHA1 9922521eda3dc8ba01f9d319399c1ef9daf28516
- SHA512 9f14dd2b1fa7b2b329fe3c81d893d2aa28e965280c3908ec31d18bad721b1969b7fb03e2f510319abc365b306c2a1586c8d35a5652fff02dab108882ed27482a
- SSDEEP 3072:X+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:X+hFD+7t56OD9ZfSApprr
- TLSH T1E2D30232AA95D8BB89FD6541F157A300DD76A8ED41DE3A0944465F8EE09FD4C03B3A33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 132KB
- SHA256 1c17b9c87b7a896fec67dc1b9fe4cf95fe3b352e665ff7120b0cc6e623a79fa8
- MD5 7679936ca2c7155fcdd2309b0c5f6e69
- SHA1 17cca715e0cfd287d1944c00f2e8ec4a14c8d19b
- SHA512 d191e7dea8ed98599d9dc08d4c47a2e3edefae222aec17c52f6f81dd39a0c1ba271e8aabea0c60c22bb583c1f0657a9c317c36d4f3881e95a8b09512f8dd31b7
- SSDEEP 3072:n+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:n+hFD+7t56OD9ZfSApprr
- TLSH T1C7D30232AA95D8BBC9FD7541F147A304CD66A8ED41DE2A0984465F8EE09FC4C07B3A33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 4abe520020e7bd538e1ac52272ba0b7669cd5d670119e9336051978f56093105
- MD5 fb6228e70e251ead564502467b4ca80e
- SHA1 4f8232bfb535f83474c4f88f0209849caee3f52a
- SHA512 d81b064e4289f25e5155f9da9f52d66096ad6ad2ff3d4dc929dd95a2a9389d2233ed86ac89a55f6beff37a9a3f26a96bbf8d4445eed1500fe1b257350f38baab
- SSDEEP 3072:K+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:K+hFD+7t56OD9ZfSApprr
- TLSH T12AD30232AA95D8BBC9FD6541F147A304DD76A8ED41DE2A0D84465F8EA09FC4C07B3A33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 2b8bc218bb5eff074730031c6bf0e6f3c832c5f53c47c2f6b551ef07869301f1
- MD5 24409ea67805234188c46b8c792fd491
- SHA1 730da92a52fccd7c4a04e1ddacf04e3c1ca5cb54
- SHA512 be5b71607131d98224a8386996d29f872ee06355dbab4144daa42fb5020aeee1eb5d9299564348edd0b882f0c2f484e983f88ff3b422d2f8e64793808ba1a1f8
- SSDEEP 3072:E+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:E+hFD+7t56OD9ZfSApprr
- TLSH T1D8D31232AA95D8BB89FD6541F157A300CD76A8ED41DE3A0984465F8EE09FD4C03B3A33
- MD5 SHA1 SHA512 SSDEEP TLSH