hxxp://coffeeshop-library[.]com/

Resubmissions

16/04/2026, 02:56

260416-dfb8lsew7m6

16/04/2026, 02:24

16/04/2026, 01:44

16/04/2026, 01:43

16/04/2026, 01:43

16/04/2026, 00:40

16/04/2026, 00:02

Analysis

user interaction
yes
max time kernel
209s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/04/2026, 00:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://coffeeshop-library.com/
Sample260416-ablppscs9m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4840	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134207713964624709"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
2824	chrome.exe
2824	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe
Token: SeShutdownPrivilege	3676	chrome.exe
Token: SeCreatePagefilePrivilege	3676	chrome.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe
3676	chrome.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 3676 wrote to memory of 4688	3676	chrome.exe	84
PID 3676 wrote to memory of 4532	3676	chrome.exe	85
PID 3676 wrote to memory of 4532	3676	chrome.exe	85
PID 3676 wrote to memory of 4840	3676	chrome.exe	86
PID 3676 wrote to memory of 1744	3676	chrome.exe	87
PID 3676 wrote to memory of 1744	3676	chrome.exe	87
PID 3676 wrote to memory of 3604	3676	chrome.exe	88
PID 3676 wrote to memory of 3884	3676	chrome.exe	89
PID 3676 wrote to memory of 3604	3676	chrome.exe	88
PID 3676 wrote to memory of 3884	3676	chrome.exe	89
PID 3676 wrote to memory of 4540	3676	chrome.exe	91
PID 3676 wrote to memory of 4540	3676	chrome.exe	91
PID 3676 wrote to memory of 1872	3676	chrome.exe	92
PID 3676 wrote to memory of 1872	3676	chrome.exe	92
PID 3676 wrote to memory of 1348	3676	chrome.exe	98
PID 3676 wrote to memory of 1348	3676	chrome.exe	98
PID 3676 wrote to memory of 672	3676	chrome.exe	99
PID 3676 wrote to memory of 672	3676	chrome.exe	99
PID 3676 wrote to memory of 8	3676	chrome.exe	102
PID 3676 wrote to memory of 2536	3676	chrome.exe	105
PID 3676 wrote to memory of 1200	3676	chrome.exe	106
PID 3676 wrote to memory of 1796	3676	chrome.exe	107
PID 3676 wrote to memory of 2272	3676	chrome.exe	109
PID 3676 wrote to memory of 2272	3676	chrome.exe	109
PID 3676 wrote to memory of 3672	3676	chrome.exe	110
PID 3676 wrote to memory of 3672	3676	chrome.exe	110
PID 3676 wrote to memory of 2824	3676	chrome.exe	111
PID 3676 wrote to memory of 3820	3676	chrome.exe	112
PID 3676 wrote to memory of 3820	3676	chrome.exe	112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://coffeeshop-library.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb9fd3c728,0x7ffb9fd3c734,0x7ffb9fd3c740
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,2931523797300258342,13258002298688545373,262144 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,9895546812589223936,8188843986495083602,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,10822603573064075108,8340334772212087486,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2932,i,8898462286353019312,4868473833436416612,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3084,i,8265541169638102226,7484467033963348649,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4376,i,14059431415764312160,10349952535286374806,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4400 /prefetch:2
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,16716298608468152291,7369707298641927156,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5116,i,3286189965672870241,6318117101622481648,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5284,i,10542737382662203643,14868832422288582077,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,17156930136604763934,14583906252018859244,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,18170007987813128440,8468436724334067330,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5156,i,371484444372150547,9721442126979900603,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5116,i,13985630635912152742,17973492696594568007,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4476,i,4996585864514435031,6032526088417248464,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5100,i,18347743634123550502,8890661874648876135,2097152 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5156,i,2333686450082004095,9659322941839212253,262144 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3352,i,14120800753522494128,4422483859892925099,524288 --field-trial-handle=1968,i,8635034575869497349,3357440763818147863,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  PID:3820

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:8

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 7963d45efb10a9c3a6fdce4e0964c7f12ee80d511e734fa652bbde2049201093
MD5 154b4129beba096e10f4629f8d6d2a99
SHA1 52cf06930128b60335dbf684fbb2e9a7023559b5
SHA512 781a7ba35b96176f2679d417eddc68fb3e134a7ff9e83b879333992c4ca77434298a9a7c7aa255883145b2fcacd38087293d076fc7de9193e088336f544c0951
TLSH
T16FE02BEBC826DC372CFD0B2861545742E75027172781484F3A3C960D8FB077A45928AC
MD5 SHA1 SHA512 TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 37KB
SHA256 a88411444ea57880a940539ef1c3b8542cb0a44656af22de184b6cff1d6b7960
MD5 1e9560a7187265045bb298c33a819dcd
SHA1 d9cc2df6628ca91920ccf0cff854be0451bee8d0
SHA512 0464f710ee5d7248a076be6d10f1ef67d1cd949b1bd70af5fe103cd375bc7cc1d9642ade35b50f537d0c3acb49383f85f0b186b5e66f2bcd0c83b3d43514871e
SSDEEP 768:lLNeVOmljARuHrKutX4qIET/5hKWMTZd3s5uu4wCm0t4i:5QkmNA0OuCNC/5AWMf3CgB
TLSH
T12703F1C61049578B755DC7A32F2BF33455BA50E2C9D005ACC1A0D843A0EE3ED3D8B2BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 6b95cf5fe159e3312684d0ee300b0b5365188b318a366c5222a8fa2cc06b031c
MD5 1cc1589a9081e8dd38879e85ff67ada0
SHA1 10d134efc3a4811453c58224c5ecbccb4fee6f02
SHA512 8f24915d68044d925a56fe3d924c7ff471022a5ab7bf64be349d2d1c849d7dda10704b79c34972c5d4cb91fe4269c31aa1db2a2b1f7359d37411a1fd2042111d
TLSH
T156313095438CDBA7EB8F4A3187914846223D44DA2C4E771E88D4CCAD2916281D5CF7CF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 960B
SHA256 70b1f7a417268f7b79392725f79343df84ab16c9feabe9da9c5949f3b75580e4
MD5 89fc69b7b53d6e66dfe2cad0efdbc5fa
SHA1 6131dd99f049c6b2ea402ebe125911825e6c5c5c
SHA512 94c02935d261058bce0697a46f0e2e6448f5d5380d27e49a81ac130ffec6c9d4d2b1fdd5e66c79a1dc36cacb3030fdfea7343bfdd46fcddd60450fc20614fde8
TLSH
T1CF11DD2287C5D0DBEF0D0A78CBA28CA8115041851C8DB30789E8CC697957BD0E68F72D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 c1dc952aaaa9c1b1ccf1b928c8cbf0c28bd8f4d7d78b26c9804804d89bf22437
MD5 8e67a845b7e43efd1279b3bf639da01a
SHA1 5d9350e10ae92aab64c83b0180782fee2ff37850
SHA512 8e4373b2b75d756fe9780a9f9ea506e181d1ada1e7c2572dac7d4346effefa46a4f64ec59e9e34f084ff2a0fe2b783cc4b0c3ae3769458ba2e024dc06bb97ac3
SSDEEP 96:D1qJqJAJvJzaIaEgdLiagNkVH52L5bcRrf5PcIbymPCqWPeH76:D1qJqJAJvJzaIaEgdLiagNk50LNchf5G
TLSH
T147C1C0F387E8C92E8611A9F4EA146E2BDF291A54432C7C1684E4EF0BD3E24B1D18165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 14ec007e03161b3a81559329b9b3df668e2be9b33c86eb941c0f8cfb0cf3422a
MD5 5d24314c4715e91424f6a7d2005b1330
SHA1 b98aa79bdf54c29047bc04cdf484c05c35b6af7a
SHA512 66eb51cd50b2d0a454159fe47eb29711a38b821da422d07f3da47b6647ae8fa8e1e8b8755893015987c25d16343587baff309cc50b9eb0fc8b9ab75890647e7b
SSDEEP 192:D1qJqJAJvJPu+aIaEgdL2kwWf5PqRjjhna6sNUkjbmPFWPtoNqKKl:D1CCAJvJPu+aIaEgdL2kwu5iRj5fsNUi
TLSH
T140F1C0F787E9C92E8612A9F4E6146E2BDF291A14432C3C5684E4EF0FD3E24B1D18165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8c3b3a0897ec91fd2786e2dbd1351eec6d98f2689c6a30a832306199b020af3e
MD5 cdeee0e6b7f861eea8a43436d4161d0e
SHA1 62ecf00cc9fed8db6a2c5f705343d8f0ad91c5a0
SHA512 9eb07eff9671330f37a7e068bfd5291802f24cf599589539bc4e066273a0bf0a47077ff2300e77ef2de5933f24f740fc8a1f528a8af4e1ae9b22c8b23b5bedd0
TLSH
T14251BFB3C7D89A3D895155E49A143F2BCEA90968631D3C56C8D8AE0F53F28B6D20154F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a69eb7be-8b1b-4519-8285-eaa1d3aa964c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\a69eb7be-8b1b-4519-8285-eaa1d3aa964c.tmp
Size 2KB
SHA256 5f17bd699ff68db2e42eb949db976c1a189f715acd8a245fd99bc11166dbedd0
MD5 8f64fe51b218353e4c1bdcb90f40ed92
SHA1 0915ac48188029e65e17087d3cb21c26e6296aea
SHA512 283e192ae23c16933cd752b51e09180c721cc6ddc10da7de8d3999bce62d832e1da37b13ffb230afe93311f921b97f89e1bd203a24849d2b44f64cf9af8419d4
TLSH
T1DB51BFB3C7D89A3D895155E49B143F2BCEA90968631D3C56C8D8AE0F53F28B6D20154F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0c11f1cc886d305117ac575b35698ad965309ad17e4224b6f21c125d6369b4cb
MD5 cd0c3c92871483ac8bd2220c50bb895d
SHA1 b854e89f43c329157e7b81f02918d8e25c9a89de
SHA512 d12e47b3c938ef54b6ade782707ccbc6625652f16c6dc7db03cf9daffc1e00de4cd47404e996a1cbf01c8f260bbe24cbdeedeaa65403d48aed83d57c69d3f145
SSDEEP 192:cRtHYrsGuQbav7rpAPRp2tR98Hsb+WNnSoP1y2Mf2txUeQrVyIsnAUge:cRtHMNT2HUXO6wx0262txqte
TLSH
T12842E52EE91429BB5CDAC229FD297757EBF6102160913E88E6FC8A3C14DBACD2117047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 fa6481509ed252231cbeb61a87194e02f7c2f3d9b10c1211dcb07c49f593b973
MD5 e561ad787710384ced180a168a7e7408
SHA1 58350d001053d5655c56d2e9b8e091d3bd5d2ef6
SHA512 c58919b4436537b18c172a10595d222e42735c5b9e9fb2e695c5ebaeb2c61f7bde3b5fd5ce69e6a277c5ae85e7a17f388a37e0b9df1edcea371740aaae2ae85b
SSDEEP 192:cR5ZS6r87kIsjrsGuQbHv7rpFPRp1to98Hsb+WNnSoPLge+Gf2txUeQtVyIsnAUy:cR/SkxfNTPH3Xc6wx0e+w2txq7vr
TLSH
T18072292FA418697B9CD6C22DFD657F67E7F6142262802D88E6FC862C14E7ACD3217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 f2d18e418892476f1ba291f584c69556d55d5699bf340d4a801320526f85affe
MD5 97534a2c8c1022d1409dcfd96c82b59a
SHA1 b1d7bb80d2ed519b296dc62178de20ec91d76baa
SHA512 a784bd4d7962915e5f827566fdd4a63462717da9642d04f18c32dd065337df2c963fc40538e915d7167a6b0ed1cbf6a2d179b49c9b8434b1248dfe0b68811529
SSDEEP 192:cR5ZS6r87kdjrsGuQbwv7rpFPRp1to98Hsb+WNnSoPLge+Gf2txUeQtVyIsnAUgD:cR/Sk1fNTsH3Xc6wx0e+w2txq7vr
TLSH
T13D72181FA41869BB9CD6C22DFD657F67E7F6142262802D88E6FC862C14E7ACD3217047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 6086b60a2694076824cc2560dfc49bd728475cc1c374df4bbc68f000d8856268
MD5 d905026ff848e883fcb38c2adffbf7c1
SHA1 4b60a84e0aac329c7cb8970b61dd494c5d821209
SHA512 c9374b2a5ba94772c383468099cb304f5c7a73b3c068dbbb0135c8d8eb65406317cf700f8b5e7e770011af1c8b2ade3d00765eea3e12ca9750169938f4a0c5e6
SSDEEP 192:cROS6r87kIjjrsGuQbHv7rpFPRp1tR98Hsb+WNnSoPLge+Gf2txUeQtVyIsnAUgD:cROSkyfNTPH3X96wx0e+w2txq7vr
TLSH
T11872F82FA41869BB9CD6D22DF9687F67DBF6142261802D88E6FC862C14E7ACD3117047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 e36f74c188fa6294f59767fde2a1bd9edc07ea3fe055c83b36a3fceeda4e5870
MD5 b1522075b9ea801d85e093471ae03a5e
SHA1 a970208291cfe3f2f73147144b82fd73ee4fabe2
SHA512 e942935c5457d32fc43b132e0d9bcae0a2079dc039f57149f6591233b2d3333b0dd5600279f697271605f7ce65caaede5c09e177b8e5f316a5c6d49c8c13e1a0
SSDEEP 192:cR5ZS6r87kIjjrsGuQbHv7rpFPRp1to98Hsb+WNnSoPLge+Gf2txUeQtVyIsnAUy:cR/SkyfNTPH3Xc6wx0e+w2txq7vr
TLSH
T1D172082EA418697B9CD6C22DFD647F67DBF6142262902D88E6FC863C14E7ACD3217047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 36c4f0ce65753e5d49e2d8dbc706b83fdda4a61992f2334ebbe60e2ef5165faa
MD5 fc0a9e5f19b3c1e46055801602e260c9
SHA1 3640c1ba90f0a5dbfd38f2e8d37ab59eeb51e9c5
SHA512 b8f5a45d099c1920a4c15ba03e4a7cfe65fa5fdd31258ec49284f84397c59fe986eba215a9baae3c2c051ec5a5effb7a96bff77b8d06632adaa58c7d2c270d6f
SSDEEP 192:cRtSP8SxYrsGuQbHv7rpFPRp1tR98Hsb+WNnSoPLge+Gf2txUeQtVyIsnAUgvr:cRtSPvMNTPH3X96wx0e+w2txq7vr
TLSH
T10F62E82EA418697B9CD7D229FE287F67DBF6102265802D88E6FC863C14E79CD3217057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 79d1efc5b1d731ee424e080ca65090a800444490a52443d0b985cf0b7cce59e7
MD5 29a46e650729332df462debb20e5276c
SHA1 a7d5a2073f05ee0d92de43afb9ca220b27eb5af1
SHA512 af96af95801a746ea001c543ec01b008ffba5a4b31e3938306ff4e7488683b1d1c2b94d277468c40c26cb139238cb172c6035fde566b1ea9a6a886799541e497
SSDEEP 192:cRtHYrsGuQbNv7rpAPRp2tR98Hsb+WNnSoP1y2of2txUeQRVyIsnAUgE:cRtHMNTtHUXO6wx02e2txq3E
TLSH
T19542E62EF914297B5CDAD229FD297757EBF6102160913E88E6FC8A3C14E7ACD2117047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 03973a25da0021eab19b8f1369a5523343654f3887234a1e1cc301245a48728d
MD5 e96921d5ae30116aafe48367f7ac6695
SHA1 c6641ccac61c68d82ff32eff425c15feb5074091
SHA512 7547cbfa0fc206b66f70451b792b574afeb0e98365fa6e0b5000e8553976425c99b5d9d4c5ead0b18d87bd8ab8100bb185fc97363145cbc0d2cc4cf9b3e8d865
SSDEEP 384:MajIf7KxkXqKf/pUZNCgVLH2HfgslPa7pLuLcifqrXODID+ErU36SHG6+AwTlTNv:MKIf7KxkXqKf/pUZNCgVLH2Hfgs9a7pb
TLSH
T1A1720B777C4C9E7B0F94C6C8D8167E4FADB6024A65DD886482FB982A03D4BCF114A1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 24aeb86420e669e9f1e13a8638839a787a8ebf0306fd75f315e881d90ebe9355
MD5 471d32214f743f6a12f2c122a939b76a
SHA1 14a5d3b51336527c7302ba1083bddc4f61753583
SHA512 f5b62c78d25ef51d7325408e831152f167443a1529558b6d43d5bb2822599308210e21ff3b62f1d327ac5e4024ea1e249c20b87f8835099f86c706dc8ff6abeb
TLSH
T19AB012A180019A61C01302F61182448871549F109B06130553F0ADB5D8261D0C01C351
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58725c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58725c.TMP
Size 96B
SHA256 88120b3da8d6a6e2a2841bb1a844a68b7d233c2fa04794f3dcb7f72274201a33
MD5 056eea3a114ca60616af325d2d8f44b3
SHA1 42f24be41ef6dccde8e39bda46b495cd49deab2b
SHA512 64236f1de059faaf9caa98b913ef034cdc8d855e91e17acec56f5ee3b8c116c9cd9db1cbf3087759f2b0d6d27b7a830571b609767fdb73b7401d0dba4ddd6a2d
TLSH
T130B002ABC10BE222D08203B02ED6A5D9B171DF26DA03121BD3E05B6BEC25A608529660
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 bda9651bf777441f5fdd5aa90c87eed90cdece6375f2d4ec68edb88a8f46312b
MD5 5b979c12b6706bbcc924b6279348c5b1
SHA1 f1899708751d299b9aa70f678e60272aec7676a1
SHA512 d863dbf3a05011e179542c1feb944fe9781de799877c2035ac7793c4012c2d627266fbb3ea35073f66e203544da8f3d311260ad80c762041405dec240146fd23
SSDEEP 1536:IJTjcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:av3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1D69302BA8D2A49F799BE5691769E3809CE12130DB16FA8CC716C578C21D41C82B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 77aa0af411dd563688ec6804d87891889f75afdfb7f47f8e52fb9444b2260e15
MD5 835e2df6b03bec9136e5b4a202f1f584
SHA1 88bbd26e1e027c031d26b337b45642388ac05ef7
SHA512 5f11b3e2c1058b9265b6ba19c2770a5c1d196651caed723c8b0d2d725f61298d98d468905bc452167ec6da71612cf2c8232262ea34eb312f19202c67893547b8
SSDEEP 1536:sJTjcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:2v3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T16A9302BA4D2A49F799BE5691769E3809CE12130E716FA8CC716C578C21D41C82B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 f0ddf15d5fe2f2ce0044eaa1f399f66a5809a3bdf8900eca2f33e857fe9bd39e
MD5 4edd9aad7d1d57858c88a0a6eef7fe28
SHA1 814d717028f9125a330df42c3b9f9484b0022c39
SHA512 b3abeaf481872a109cc344b4124bc08af39669436bdb4c96fcf8d4468645c7218763b72ee84ca163eb9bd36ac78a15caebb1cd0dde80102572f90878d1dbfef0
SSDEEP 1536:sVqcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEL:/3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T12F9312BA5E2A5AE755BE4691765E380ACD22130D719FA8CC726C138D31D41C92B73F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 6ca7fea1a193955a7b009981b7265148bdf8e65389d0469685bf877f3526a542
MD5 8529d784300c05d92201188a4ec20dd0
SHA1 adc77523c68c311925d910271876d1a615cad147
SHA512 97e84427f677343acf9d0d7e5694c207125a6af6d991e693d8327c245ec4cec4056a9be947e48f5d6cc0afe3c7eea95bcacee6e73ee1f4cff581a6c6a2b6fce2
SSDEEP 1536:gtcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3b:o3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T17F9302BA5E2A46E7957E469176AE7809CE12134D70AFA8CC31AC539C31D01C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 71f4c381074b3d1670f2c8caf370518ff84a196fd27a909e8fb359c801de50d3
MD5 0b7df4b4b934a01d36dfad60f3c0b9a6
SHA1 375a495c6cab73159504e8072ef7d3da2a538569
SHA512 fab3d8a3ab245bef17973d6bad53375d7a266a26e34087f279bdacd7f8254c6d46f6c9e2c91eabadfa3fb6b9846ee116042367796e4b63810eb8a9a9493ff97a
SSDEEP 1536:rVqcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEL:03Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1059312BA4E2A5AE755BE4691765E380ACD22130D719FA8CC72AC138C31D41C92B73F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/8-13-0x0000024D3A070000-0x0000024D3A0C5000-memory.dmp

Download