hxxps://dnstwist[.]it/

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
239s
max time network
240s
platform
windows11-21h2_x64
resource
win11-20250619-en
resource tags

arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system
submitted
20/06/2025, 12:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://dnstwist.it/
Sample250620-pae8vsfk7x

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-625765727-1271952295-745797415-1000\{814012BB-72BA-4EA4-9EDE-7175099CF3D1}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-625765727-1271952295-745797415-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-625765727-1271952295-745797415-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-625765727-1271952295-745797415-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-625765727-1271952295-745797415-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
4292	chrome.exe
4292	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe
Token: SeShutdownPrivilege	3404	chrome.exe
Token: SeCreatePagefilePrivilege	3404	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe
3404	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3404 wrote to memory of 3520	3404	chrome.exe	79
PID 3404 wrote to memory of 3520	3404	chrome.exe	79
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 1032	3404	chrome.exe	81
PID 3404 wrote to memory of 1032	3404	chrome.exe	81
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 4260	3404	chrome.exe	80
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84
PID 3404 wrote to memory of 2632	3404	chrome.exe	84

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://dnstwist.it/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffe155dcf8,0x7fffe155dd04,0x7fffe155dd10
  2⤵
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1960,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=1480,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2132 /prefetch:11
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2368,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2380 /prefetch:13
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3136,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3144,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4180,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4208 /prefetch:9
  2⤵
  PID:3912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5092,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5104 /prefetch:14
  2⤵
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5528,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:3996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=212,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:2248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5548,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5364 /prefetch:14
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5412,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5096,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5772,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5800,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5996,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=6040,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5052,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5940,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3588,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3196,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6456,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6596,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6764,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6880,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=7068,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=7104,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7228 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=7024,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7204 /prefetch:12
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7396,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7704,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:2516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=5312,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=6416,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6188,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=5104,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=7784,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5116 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=5944,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7516,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=5360,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=6208,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=5784,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=6128,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=6712,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=7708,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=7152,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=4392 /prefetch:14
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=5408,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=4364,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=6548,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=5516,i,16301797129142598853,15525050785931822075,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:3432

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:3164

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4740

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 26c3aef3f141028657e7d7bae66f4028b1ae9e7b3e67b879370584ac38fdccc7
MD5 db672f710639a76880b39a966d1ff8b5
SHA1 c1ac40d02bf8f28e229c1a053b47a933a607c4b6
SHA512 1963c6d326da3e52e9f800abc4b53be7931e53376eb1896b6877f45381de62d180b6cde3045405b226cdaada911c23b77f1de233b23e3980c979e5868de6abdf
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 e30db5d266ea6c8c761ef4f27b3b16b1fc5dc2d575c02228c54d05785d449dd1
MD5 0c55b310d5ddd732224e6b57c77a7237
SHA1 daa70fbc8575b8e770f83bfdfd9925e982bb2079
SHA512 11cc695063a42ff04c925147120d72b13ac5c3574ddfeae310151c8205588ec60a54d1e8194bc52ba7ff165ee868c94e6231f9076d1319c1ee98d885fe5f4904
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0623ce5fb9466bd84e5748b35519f29356a07c1622b8b67bf9afaa2b2b9823d3
MD5 969fff03a98646b2a5056ea40df973e9
SHA1 4c8f5e95735ba9be83cdd53a708159aa611811f4
SHA512 66ad407b4d7e988f672b4c6c7112d75d4ca1216d056750d9279b0d864d783569113ae5126e1839cd72ea859f1ab2e258a5710a805d417784ab99296fcab3826e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 72265fb74b4d91b50cfb546252bde8dbdf52bf1bd6684d0673fef732d41b986e
MD5 d14fe5d55f88a7817bcaa73123a504f8
SHA1 b0483c4e009cda0e7065636077eb6e6f8d508521
SHA512 488057aae5b1033da7ac562aacbb866dac155da95c0347a7932af9f3340e0c09b6a371ed40d6a874e3a0fca559238f35b6c055c017ba197aee1aa0eb30b178d7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 6a1959dd32b1011ebe787aa4d41a7b8f5fd3da0b66ee10d96bfd1f5a83aa03be
MD5 759ea8eb23092d4f22a7e61b5d5e708c
SHA1 b1b163b8bfebd733f945f4f02dded18a2da075e4
SHA512 2252fae040f159b0026cf8f559c847ce40293eeffc355fd9a764a349c460d934a67f3d874d4f099c8fbcb299fc62bdee27118b2dccb9cc86236df0200febdda3
SSDEEP 384:aaihy/2jbUocG77PyXF1V6UovObBRd4KNGJd6VR2WIHAtSGEk4+D5B7qCA/b05GP:1hFDUv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 7a3612df16b41a2a1877f22e5a60993e93a76581a454d5ba4dc3bbd5bd5ca276
MD5 82d583fead3b5db28bd0e2bfb0cb6582
SHA1 16fee9da35a58028a2a41d28af7b48b83e4d5066
SHA512 42e1765c63bc1a286bd715bd84e894718109ce09615ab9f910b666ca95e32520ec1a357df350d39662542245e7f1ff6ffb94420a9216cb1fc5e280433fc56aac
SSDEEP 384:aaihy/2jbUocb7PyXjovFd4KNsd6VR2WIFEk4D5B7v/R5GL+4E5VR/F9paREanae:/HZHvq
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 ef9894b76081ce37aaec3cd08d9d162e4a1de3c9d5de3af2ecb9f73a4cb39162
MD5 065218dd800ac7f92f73863c7ef5d34f
SHA1 a0dfa1254e784c26763005911bf74388f5185078
SHA512 3cc3d8a75cfa8f04475e0cf65744871e013809497414d328f023a952a12bbfee465e010e9e9ca05fc19635e5c4ad357fbba448cb78a47d53daee2e7d79cc729c
SSDEEP 192:/YxXzvfocZZZ8PRpN1H2UG/CT+WNBR56IY44pfyIsnA/g2:/YxXz4XN12UG/CNBPvYFg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 33b737ee5b4b9dde7bac9b812a3fdad53202d40b5bdb6ba7ebc375a533c7f377
MD5 87cc359cb56dd859a36a77f13eefd822
SHA1 b8de4d940ee5d01860619567fe94679033cb6069
SHA512 028531c629f6af2c8d36679fc9f83d71463acdf616af74640064ce9858c3881495c971ca7fe07ec8930681e6f272586176d5620e7d187f6f2c3ab6e1cbff35c0
SSDEEP 192:/YxXzvfoclZZ8PRpb1Hne8G/Cfi+WNjR5gCSg6AkRA1DfOZIO/ypfyIsnA/g2:/YxXzcXb1e8G/CEjPzjLyiDWZIOEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 9KB
SHA256 d925e37c15e03bc24671e0d669a858af1e6edde6f8c06fc4746365505324299a
MD5 f2c6d1b0f0f00c8973e2e77360a8f666
SHA1 38370cfe5bd7dea0e1c7f7f6864ca3f01332496a
SHA512 d61674bf448ee6932be94eacc100e2fc8d8cc7f46601a32fa98dcb9740df5528bb687ea40cea2f395c179c4996dff35e51f7d502ed9cc8a0b5473196b4ff3b13
SSDEEP 192:/YxXzvfoc2ZZ8PRp41HS+WNI5WE+W9pQyIsnA/g4:/YxXzLX41cS/+uZ4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4550c7c97d0c670109d683bf2955eb1dc3197fca7444ab9a41372777c690acb2
MD5 ce0e9e8b1f244a23cdb198547b640611
SHA1 fa99777bef75e5240a531d17a58ebb5dff801c64
SHA512 6a17e971ca60a899f650bcae769e573cf9482eb8a1adf4ba490714a938d4707709705f49888d2d3b32bd6f496a4d4e2ebffbf0f601b56b958a934c4393987c92
SSDEEP 192:/YxXzvfocmEZZ8PRpP1H28G/CT+WNjR5gCbIOAkRA1DfOZII/ypfyIsnA/g2:/YxXzepXP128G/CNjPzcXyiDWZIIEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 29e58a63787bd2b50a6298af3aaa67414c83cb1a2eff1dad661f2261d9020bf6
MD5 5cb1a10c76ae7e37eaa7f6508a2ac3e8
SHA1 02c303e08fe2e61a0de07870209cddc395a4303c
SHA512 96554440b6d9838084e7fa4b2151c0dc3048b55750a764ed8d75547eb43ed710cb8ae652acfd866e160d899dc8587c575d77e990273efd96f10545dd33d888c7
SSDEEP 192:/YxXzvfoc0ZZ8PRpP1H28G/CT+WN7R5gCbIqRA1+Y/ypfyIsnA/g2:/YxXzBXP128G/CN7PzcEi+YEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d71732440b78a9bfe92e1e7c73c9e3e8ce9d3461ac3717c1aa53371852a41562
MD5 91e6f8705c62e8afa08dc6f07e0b33e2
SHA1 cd516659e33b3c3caf640e4589a57d6c0f350d6a
SHA512 469ae2229ee6804e3043ad31c3772f3514b4d00a9e82f9e0183c8ca1ea87de063eec199b4847fa0160bd147da826e349d6ef40b7c4c57150a52250fa59d8de40
SSDEEP 192:/YxXzvfocvZZ8PRpb1Hne8G/CT+WNjR5gCSg6AkRA1DfOZIO/ypfyIsnA/g2:/YxXz+Xb1e8G/CNjPzjLyiDWZIOEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 10KB
SHA256 3dac9936ad1a6304c386ce4bbb70fbca5ddf213aaa57d0ba414e182b3a532af1
MD5 986e06af6dd4c26438dcb984b1b604cd
SHA1 5b5c40a1084e089f382ba637e558ca3450b7e62e
SHA512 674e750e73e08904c815ab80b76a8defac984722750f40134287967538206402c75e731e5c4355962324682aafcfd2e0ec0585330309a943e989771a057a8ea1
SSDEEP 192:/YxXzvfocCZZ8PRp41H2G+WNI50GsD4pfyIsnA/g2:/YxXzfX412ASDsSg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 76995f205269b981e461f1f9cee5ba5d03768333380992a04206a1060f657fa9
MD5 1e7356d1fa16e0654956292c586aa1ff
SHA1 2b92c8c15ef7a129b380103a920a78bf2fe83d6d
SHA512 248b34c7fa31a50f61806e7887bb265e480336fb4301833d45746f152027cdb140157e0f87a84f79d0f13af8bf0041e79c6757fa39785d8aac36f14d5b095ef1
SSDEEP 192:/YxXzvfocVZZ8PRpD1H28G/CT+WNBR56IqR+P/ypfyIsnA/g2:/YxXz8XD128G/CNBPvE+PEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b7410cc5c6222b81b599fbc84387f2ada8bc97fb9cd8cf9f0cae0e3e95fb8914
MD5 a6cb045a1a8e5c89b55d31516fcfe31d
SHA1 7730eac338b82a6beb89ef2048ad5700aba04df7
SHA512 f44bb1a3e87b2cf1e1f78e37eaae75d61f93e3951f418ca776c7493641eb8fa5616d5e6737b86c924d6caab0b09b146ea48372ed719a56d261a0415600e3ebf1
SSDEEP 192:/YxXzvfocOZZ8PRpb1Hne8G/Cfi+WNjR5gCxroAkRA1DfOZIV/ypfyIsnA/g2:/YxXzTXb1e8G/CEjPz1ZyiDWZIVEg2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 15KB
SHA256 f3dc7486d61316ddee800bdcdbe92b8d1b90fda7251234b7a012f95232195875
MD5 9d4eecc166c17244281ba36d919b41ee
SHA1 cdf94ba2c262e005e03de54fb2b2ea28bc65ad2a
SHA512 032eeeb7e701980a9dd27c4673b1290dc77a3e86fbeb33319c6c7d21ad060121979aadaf275ca105ff3a9a54350e2ba71527c42923e1362c8361d48345436357
SSDEEP 384:H3Di7pLuLceifuXpqPkXqKf/pUZNCgVLH2Hf1jmrUNuHGCL1Q/pb:Hzi7pLuL7a0pqPkXqKf/pUZNCgVLH2HV
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\126d0855-bdd8-4f98-a99e-bb7a75854f92\index-dir\the-real-index
Size 72B
SHA256 d9a86b36480985bfc02648767471d4f0007321808b056d23a2ffdf24741afeba
MD5 c47cb72656e77ece2b0d2bce5551ebd4
SHA1 075b7e2b753a9f1ad5398b6b17c5c92fb5cdccb6
SHA512 8035f4471ca235be849c53ec5c2a955f5cda48cd134a9c8f72acdfa262c23fd4a3e319ef12b5bdb28a0574eceb00f0196e193a93897514ecf40220c5a9373419
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59986e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\126d0855-bdd8-4f98-a99e-bb7a75854f92\index-dir\the-real-index~RFe59986e.TMP
Size 48B
SHA256 0542e9fd31d112c816338f30066ab5151ede211f7dbf970adcfc76fb501882c3
MD5 8354c8091e5d015e3e38bad8f8c28db6
SHA1 156049b9680ed2b9dd7105680fa86d140b9319df
SHA512 d7e7d3665879d5c3700949e710049ca8acf8c97e7d14b2638c4ac374c2c982b6d9d0bfb0576ecf907f17fa70325b1b91902267b8d2032616d6003969a148182f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\2bc7e9fd-64bc-419b-99a7-5918e40b95f6\index-dir\the-real-index
Size 72B
SHA256 9e7474ff253db93eae5cdc031c679a378f1ae47efd1cb64e88faa098d660e4bd
MD5 4d3f08bd2b7e28fb759913cb3b152544
SHA1 85d61bdea6da761a8f2cc5298cbe104dde302832
SHA512 166398707cc22d50bacde022cd9f36e7a955c1250dbfa141a1b64eb5365b904a3cd40674bad58a95de64f8dc5c4685d10c23589429e997f37a88dca0d4f970c1
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe59b58b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\2bc7e9fd-64bc-419b-99a7-5918e40b95f6\index-dir\the-real-index~RFe59b58b.TMP
Size 48B
SHA256 2190004a8a0696dd98536c783460c671f3e8ffba7b95a8da5d2e4d664553699f
MD5 b805e92905e672443561885f9bf14ee9
SHA1 4d9ca8329c5c146889de6ec6c78d1b526cadbe0e
SHA512 ae4b63f15e84114d49565a3c00648064506e558cbc5c495d879d285ac2cf729caca752fb380fac7b3735b3b2fbb699895530a435f969e4e82dc759f10b014afd
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\index.txt
Size 200B
SHA256 e1b35fcaf0b58447fab0807ae23a0ac8fc0cd4ff318dc591a0278747b04e031e
MD5 2feb178c6aa444fccc6d44ec1bf6cc6d
SHA1 9448196975f4d5b3e0cce3cd37c9c967918d8961
SHA512 466fdd83137d3c274200b9562fa299afcaa7f11b10b2d69866adce174da8cd486ae78d9097d711d1403f1bb2cd57c2697557af0f4af72bcbf4da3afe06b0e78b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\index.txt
Size 194B
SHA256 9ed13733befdbce531f648880efa844526cfad6adec368c55d61839767c0b1b7
MD5 5058d772b19b54ba477d902dcf486415
SHA1 f68427daef4b58adef142a17aa1ee5cbfaf98650
SHA512 78e61d86985f115a65e39c7e41213229b33a6ea29b0aa4f5015ffefe898dd35ab60e79a1e8b11ebbb51e650dadc894efa79c7ac8108cbe2544a468969b7991a3
MD5 SHA1 SHA512

Submit Download

index.txt~RFe59675b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\b6a7a30d11e0a8953778ea3e85c184b6900315b0\index.txt~RFe59675b.TMP
Size 134B
SHA256 9a091ce91c28da6168822f5db1a2ea3f93fe69960655881a4a7feaa942c5c434
MD5 89ee730716b73838980f67907d9741c6
SHA1 bc050fa9bce330c62cb254216a229540fb7e2b2b
SHA512 4caaf17f68ee2d673609f7accba316d4d78c51f55a225a9e9906a89f2a46d15986b5c60f3369f85064d5133d87e1449214cd6972d9e01da8bc31b65ac4711c19
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 230f157edbe5ea6e3d5418c0b38493b88082d84fe7825aae8e7b250a028e3b56
MD5 0d467cacd528881f728bb9a1ab8b534c
SHA1 220662e27dc9ed82c194ce10eb86e278dd28f6ad
SHA512 e46733feffaeea98dcdb5b713da42d41ba7ab88114480bbaedc5b6c0e1b1b657a3ad97990833af2ef5303e7947b91a3ba88570e5b03a92d456ba67f82bf8f804
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 59e38bed6e46c3d6938a4b5e5f96b580ff0abf3abc1584563e90de63eca40975
MD5 15e36de2309e9e2df4f9c244e30a1ab8
SHA1 b1f8ccd7e9eff24ac380f0664a297888490423ed
SHA512 e0b7dceee3d06017c47c2fc1eb5127d796d6639688bfbfa441fa1067f1cab16be925ed60040b54482877608fcd7aabcc0650fb4a3a7117e1512c663d373353a8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 599f770d2fb294aee74e5d64af245db325ef5b890c900bdbb49d5d1c1e451b00
MD5 5159da14984083fd725812cc9829897f
SHA1 d9051e9f53eb53f335cdefa77460cfc47c20c524
SHA512 de9cc70fe587220b0732134af77d275ca512e95565016e81d304081a953b9253d1cb6cb48c7446d07f494f62be8ab111c7ebc009c1301e0e83690b1972f12ba1
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57e06d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57e06d.TMP
Size 48B
SHA256 c8614951844d64df4230bc084ab18af0e4d67acc0418c58c4a8b5ccc193d4619
MD5 ae9eb5e0fe59d9412d022b335c31c080
SHA1 7bd486997e29c4c235b12a89d097b47648ec9e5d
SHA512 47db8d8f9ed40cf68e25bc2dfc22f9e39fa1fb3ccf1cbb1dd0e85f7cc17566b7bf67f2883f7f6fe9243652103895608eb0036784e4afc82991e0aa346208ca53
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 84KB
SHA256 4962748079ce74aac5df03740c2bf4148de7e988483f33baa960895ce2f3e251
MD5 444a57c1db677cd40ecf3ba3f44a82a1
SHA1 a6a1886cef47d0fc0bbf3732fac183c000137e48
SHA512 f29eb38165d45c5c6600fec57d29170be663a32234a593d786e63231f930a9f24fc4e0bba2991e443c93c53d268fb0db0b87ea93edf40c2347ae990fe25f17c3
SSDEEP 1536:+ImWrXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM6:mWrXjM4rTmN5eWvStRNoV8cWK7XF+Twv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 83KB
SHA256 8f5a378eddf59efd520125211cd7eb5d9f5f24a996ca5760a4beb602ab726b68
MD5 f45b68690113d0caef887127c767de17
SHA1 f925e5bf057cc37430d49693d7e45b2253136274
SHA512 e8c9e57f7cdc6a0153eb21d945d214023b6683f66ec054cdd4287ec6615a82202fb94e28b617eb676cda0d823950a0ebe7d978ddefa8916d62327efc6244f6b9
SSDEEP 1536:+ImOXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM6:mOXjM4rTmN5eWvStRNoV8cWK7XF+TwM6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 84KB
SHA256 fe27ee6606175c66d46887490f30f95a58d38e5256b02a4d2aacadfd634dc12b
MD5 34f25f06b2af5a43b3dd077eaa72f28e
SHA1 8417f57a2a25ca7e459af986520495e4642a27b9
SHA512 d29520be55487b90940a541a711d1cf33e13cd6852a23e1c6ad3965739c3ead9f5549105a118b908e908d4945b6b21b394b64626ee590b583606f658204e4bb7
SSDEEP 1536:1ImWrXj8V43bjn6ldz5eU1vkHzZYiVNoV8cWKNR+K7i9U39SK17W5HvTwM6:vWrXjM4rTmN5eWvStRNoV8cWK7XF+Twv
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 9KB
SHA256 367acb3a1f1961fb10f23814a63f8095fbfe6f3382c21c9ea140c2a421fa967c
MD5 9bf4b231c1c027b22ba677b3646476bb
SHA1 b0889c5762df2b1d778ea5cbbe02b5647613e8a5
SHA512 c651ead308cdb6a97ed9e28890554838a07b1b0b284af5cef40948c27505c61979f199164b2b589de19ce6f4345f73d75f0e2e81327ca7110845f31e203c06de
SSDEEP 96:F+QYCA2UIvX+QYCA2NnpGjKb5KFs58+QYCA2IEFkM7lHs4QO+QYCA2tP+oCA2g/k:TUaNpGjD/7lHs4QS8h
MD5 SHA1 SHA512 SSDEEP

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 9KB
SHA256 a40e964d223805e1bd9dd75ba359b664a0711190c9736a7f44475a8a6c81837b
MD5 2ba43341e2c0fb152ba9369df0a28f97
SHA1 b7167909590fb458e5666b44b92bcb7f20efaa07
SHA512 30e6853dfa55ed8dae49782af603e60541f0ccf5ca1737aaed852e7000f05947c2f3f8f94a11c3e1afb56f613de661ef772cb09a0217f6a2c8e0cca5b7d78b22
SSDEEP 96:2QYCA2NnpGjKb5KFs59QYCA2IEFkM7lHs4QMQYCA2eQYCA2t8oCA2g/k:hNpGjR/7lHs4QP5mh
MD5 SHA1 SHA512 SSDEEP

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 8KB
SHA256 618bd991ce7dae0232ed93c965c931f034454235d7c09e3899655f232092b7c4
MD5 c84850fc0ff0fac9ed5a4c62a50ade71
SHA1 615d1ee56c4a2670ded9770ad9c9f0e2df6b5e54
SHA512 db1bc2dd7b978e4d83408c19f021c393ead9e50e6b5133e59eebee5754a70c695cc73b60ca8ca2068ea07611a26ce7efb8645c669f6c7a92ce6c66123797a9ea
SSDEEP 96:2QYCAQIEFkM7lHs4QMQYCA2tQYCA2eQYCA2t8oCA2g/k:z/7lHs4QPa5mh
MD5 SHA1 SHA512 SSDEEP

Submit Download