hxxp://lechmanoval[.]systeme[.]io/htr

Analysis

user interaction
yes
max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/04/2026, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://lechmanoval.systeme.io/htr
Sample260417-mldhases41

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4852	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134208955905407851"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1609746302-1884177235-1125644204-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
5144	chrome.exe
5144	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 4572	4748	chrome.exe	85
PID 4748 wrote to memory of 4852	4748	chrome.exe	86
PID 4748 wrote to memory of 4864	4748	chrome.exe	87
PID 4748 wrote to memory of 4864	4748	chrome.exe	87
PID 4748 wrote to memory of 4320	4748	chrome.exe	88
PID 4748 wrote to memory of 4320	4748	chrome.exe	88
PID 4748 wrote to memory of 6036	4748	chrome.exe	89
PID 4748 wrote to memory of 4796	4748	chrome.exe	90
PID 4748 wrote to memory of 6036	4748	chrome.exe	89
PID 4748 wrote to memory of 4796	4748	chrome.exe	90
PID 4748 wrote to memory of 5180	4748	chrome.exe	91
PID 4748 wrote to memory of 5180	4748	chrome.exe	91
PID 4748 wrote to memory of 3472	4748	chrome.exe	93
PID 4748 wrote to memory of 3472	4748	chrome.exe	93
PID 4748 wrote to memory of 1400	4748	chrome.exe	94
PID 4748 wrote to memory of 2492	4748	chrome.exe	97
PID 4748 wrote to memory of 2492	4748	chrome.exe	97
PID 4748 wrote to memory of 5948	4748	chrome.exe	98
PID 4748 wrote to memory of 5948	4748	chrome.exe	98
PID 4748 wrote to memory of 3268	4748	chrome.exe	99
PID 4748 wrote to memory of 3268	4748	chrome.exe	99
PID 4748 wrote to memory of 4404	4748	chrome.exe	100
PID 4748 wrote to memory of 4404	4748	chrome.exe	100
PID 4748 wrote to memory of 5148	4748	chrome.exe	101
PID 4748 wrote to memory of 5148	4748	chrome.exe	101
PID 4748 wrote to memory of 1432	4748	chrome.exe	103
PID 4748 wrote to memory of 892	4748	chrome.exe	104
PID 4748 wrote to memory of 5144	4748	chrome.exe	105
PID 4748 wrote to memory of 5108	4748	chrome.exe	110
PID 4748 wrote to memory of 4252	4748	chrome.exe	113
PID 4748 wrote to memory of 4252	4748	chrome.exe	113
PID 4748 wrote to memory of 5464	4748	chrome.exe	114
PID 4748 wrote to memory of 5464	4748	chrome.exe	114
PID 4748 wrote to memory of 1744	4748	chrome.exe	115
PID 4748 wrote to memory of 1744	4748	chrome.exe	115
PID 4748 wrote to memory of 5924	4748	chrome.exe	117
PID 4748 wrote to memory of 5924	4748	chrome.exe	117
PID 4748 wrote to memory of 5144	4748	chrome.exe	118
PID 4748 wrote to memory of 5204	4748	chrome.exe	119
PID 4748 wrote to memory of 5204	4748	chrome.exe	119
PID 4748 wrote to memory of 5276	4748	chrome.exe	120
PID 4748 wrote to memory of 5276	4748	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://lechmanoval.systeme.io/htr
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7fff7d17c728,0x7fff7d17c734,0x7fff7d17c740
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,15511546875954169473,12050150763052078529,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1828 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,18445943041256906015,16737118933962917318,262144 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1808 /prefetch:2
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,2777071103274750892,9842297645593331216,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3040,i,14934545720323706879,12923744630647102403,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3052,i,2449084871278978620,12177781405155219059,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3028,i,12981827126597580022,9267530989784587181,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4392 /prefetch:2
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,3495531175909058855,15170648093517513600,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,14093867670374056955,11935325294625913453,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:1400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5600,i,4549535582746294572,12986742350193060821,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5744,i,5611526177425971809,522937349734896876,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4748,i,10479283612574767279,17949186307172329265,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4836,i,2038789716758203307,13097955620583234810,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6368,i,3982128359904132643,101640681172623874,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5624,i,10008156432567997002,12932991627700749536,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4828,i,1812529857005559806,4246326885042646272,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,9674186576549087138,14685983851092568576,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4464,i,6488471110357833127,11937225289514850827,524288 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5676,i,4035872363096384656,17872994557737395426,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4424,i,8881501397213509889,1205418553891946462,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6428,i,9539331922467417808,14016834975796008604,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6460 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6308,i,161281621596161147,2210361142093458187,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:5924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6684,i,13396672244144157186,11980611029706362837,262144 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6636,i,1190743645333724807,1912269218172426388,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5712,i,4474714617085648450,16299610585469303914,2097152 --field-trial-handle=1820,i,16816497039167257293,14610938349081757889,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:5276

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3460

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 08f9edce419571553c3a121a5f91641124e6b45b63ce24f7bbd0692586f1f3c3
MD5 8d14354393bd70a5e5f0ec7e9e07db29
SHA1 abbd47190df42f946790a9d1a487c60d9e4c6c7d
SHA512 6017dbd81da07bcefc0de120ec5345e230adbc88403c71712e2c96c11e0abf564c70fb724dd739ab83e71b9b330335fca277749ed874aaf4e6d142d7a1603232
TLSH
T1C5E0A2AAC820CC3B08FE0718A0484702EB1813173B80A88F3A3D820D8FB0637858A92C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 ec982b91f4a112790f5a1ef686f50c44a1270191ca9608e6b30eab4c9f22e753
MD5 0120ec651b20cdb166b7bef8cdf16303
SHA1 09152db40aed24c56e0f3bfb06c6730e97c727b3
SHA512 2fcb08479319bd001b70d195580a47ae3ba2ede8f9388e1e72188d9addb6f77abb35c58fd05724f5c1875a7fb2dc438eb0d9df1feb05529f23eea9b885e88a0c
TLSH
T162E0970DE9E2E103CF295EF860B31C8010E29887818A4F3B04CC897F84A32D2070482C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 912B
SHA256 c82cd24ccb35991aebb308f6dbaf7e25ed4a5cf3b1e1ca5672a24e065c3403a0
MD5 26bc015a1abd7d88de95f8c33538f247
SHA1 8772f37376accf7999e983f4f5ee2bd00802f3fa
SHA512 069a1bf0435d5cbf3050a95abe84b1c1519cfe8e54ba5f2414a6a5cabe77390389177eeeeb99f12b25d09438865b6b5276b44071b65c7651ba4c1b6eb5c58eb0
TLSH
T10C11470EF5BADC9ADFB81C7723B60CD070084A4603425E3B4BDCA36B5C426BF4701505
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 13edf0147e4b0674f3ab4f8df0e4e0e009eedd437cae5149ee8695922765fe15
MD5 5ff70b810df806cb1ca4a96d8930005d
SHA1 aa3dd62d9dcc67b678c225f0a17257ce4a69fd6a
SHA512 1fafee34a6a21a4ec045a82b2cb5bed4ee25488d86e4066e8aca3fdf563af38c21b6d6955f5310a86b748ec8732bd4272279a199b832fd92e3d77035244d4022
SSDEEP 48:YALlqftEtkWQhShaXYfo7EgdKstNA/sHzsO7soFsDXOQseKzsH+zsgfskgmgA8sr:D0m+9caIaEgdTNAUH/9sXJHEdiAVFURW
TLSH
T12CB16FF783E48A6EDA1192F5AB156E2BCE690924135C3CB6C9D4AF1B53F2471E20074F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 fcf69d0b5b98cbb9672c9b5a6612a78fa074ba1561368e9689464411ea6800af
MD5 22dde77f78bb1d585037f07d664d9c4b
SHA1 bf430fb9fb20a6529ac64e650384f4228ec33381
SHA512 c1428de0c4955950c20f492102be5ccb30cf0ec01749f99e0344485e9af1bc0b57cd9fd36b7af31aa745c772e6d12557cddbc812efe3d32d1d853b94b3c3d14f
SSDEEP 192:Dm+9g9kp7+8yaIagAUHFsXJHwiiUeX1b1xk1abWh+Ivhoz4:Dm+9g9kp7+8yaIagAUHFsXJHwiiUelbW
TLSH
T171129FF3C3D8C62DC91156F5AB256F2ACE690A24531D3C66C9D9AF0B93E2871E20075E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 aded47cf25f00595ef01567865349791a7eff63bc2e337be79951f894510653d
MD5 20c3cdabc3d060bce3a553ff4e5c0ef3
SHA1 1927215c619fdef4d262a465a34c1292d2429ecf
SHA512 d4271d69525a55b95b72353844e254caee3f4379dad5d1edda88fd5606034de3e2dc89dd799d5ce33750e5332fceb6737278a2b9224f95c8509e2d205f6ece31
SSDEEP 192:aREtcBzb61e0r2hv73pwPRpmThu6rcBul84Vy9YHsb+WNWVNSn8IVZE/Igox22fv:aR6mzbyMT0Xrp10yCwJ86GX2ESKE
TLSH
T14A62E82AB9142D775CCBE229F951BB2BEBF5103265D02E84E7FC8A2C14E75CD6217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ac7c8dd79fd6da0a51bea04a1b835e0e95bea3bfd0b8b17366b7e131a4320ddb
MD5 7a6950cf66a4ef89c412355851d35dc9
SHA1 3c6ef9b592a442de8057dd2b12933cd77f7a21ee
SHA512 7dc7eb5782cfae7fc33c2171363e73e864cfac8ea55da13beb5ba9977c6b751df0b969466d372e92ca0d6a91cd8a0a15175ccda2e8a320b30e6a4ac95f88def0
SSDEEP 192:sRExb61eyrsyhv73pAPRp2huLl84Vy9YHsb+WNnCqG8IVZfIo2SmVpSkwrYqVyI4:sR6bMQsTUX/W0yCwPX6lT2SWSxE
TLSH
T13852F82EB914697B9CCBE229FD11B72BEBF6102274902E84E7FC8A2C15D75CD6217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6e1ec251dc7876bdc6c6b688242adbc941cef4f72f54266ec1546efc3b81f9ed
MD5 7fbec0fb222bb3a4c6b6ced68f3f86d8
SHA1 7a5a23b5e0a19b1e0c3cd87d9df62bba68e81315
SHA512 c1efcb403d35c011dbe8d62ae07d1bb2731c3b8764e6f38fd8372d12b40968f059314655f9eadcea107608b917f5b08f24633a9fa2f48b5ae06e16bac4dab8f7
SSDEEP 192:sRExbneKeyrpahv73pAPRp2Tl8y9YHsb+WNnCqG8IV25pSkwrYJVyIsnAUge:sR6beUWTUXzyCwPX627Ske
TLSH
T18742E72EAA14683B9CCBD229FD61775BEBF5102274902E84E6FC8A3C14D75CD622741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c06a77db11043ba6440029b8e20bba5f7fe7dc9ba8a04303b07c3c234bdc000e
MD5 ad250bcd67f3aec0ea622e468b5cd3cc
SHA1 7107b904409fcaf7680afa0110f614cf1d6872ec
SHA512 1dbb205f9e37cdd2ecac04680fc1e218fda15af19312ce87d3bd7761919306fd6dc37eece39e80f0d585785952418b16333e17a8ece3a58324aa6a49326523be
SSDEEP 192:aREtcBzb61e0r0hv73pwPRpmThu6rcsl84Vy9YHsb+WNnNSn8IVZE/Igox22f9Ww:aR6mzby2T0XrpV0yCwo86GX2ESKE
TLSH
T19562F92AB9142D774CCBE229F951BB2BEBF5103265D42E84E7FC8A2C14E75CD6217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5aa9547cca9418f001aa45b49c4e18a858bf9ded107dd4e046e95728d813e7ca
MD5 68d0e984f00fa46b9220c4992951a36f
SHA1 a428d161cedeb8ecaa964f9a472335d0628b9fda
SHA512 c031a051aaea6e23d5132c7f19c0202b45605b84fe565014f4431e46ef050301e79784cbaca2a5c8b742952ea4f4b8180c01f7f1a249f9379144e3b5944197a0
SSDEEP 192:sRExb61eyryyhv73pwPRpmThuLl84Vy9YHsb+WNnCqG8IVZvIgomuWpSkwrYe8yN:sR6bM+sT0XrW0yCwPX65PomLSKE
TLSH
T1D952F92EB91429779CCBE229F9117B2BEBF5202275D02E44E7FC8A2C15EB5CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 fb2856c16221ab4f1fe2080c57236b299fb6e001806a25ff7e97ff8666d1628d
MD5 438aeb38dec12ae017db012906f00fd7
SHA1 dc86428418a944000502f86b676cf6490f3e4344
SHA512 d06d6cf813f8880f5dfe6128a995f36501d01679d0e672b7bb78e3cbbb4cce6fdf166270f6e4aee612cf13f12ed14da3b8b5b902f50bb455db74d358456b915a
SSDEEP 192:aREtcBzb61e0rYhv73pwPRpmThu6rcsl84Vy9YHsb+WNnNSn8IVZE/Igox22f9Ww:aR6mzbyST0XrpV0yCwo86GX2ESKE
TLSH
T1B762092AB9142D774CCBE229F951BB2BEBF5103265D42E84E7FC8A2C14E75CD6217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5bf0ce4a42a1ff81d10b5e83f27c72a8d067886a8d39cf7614447280e3cef95f
MD5 34d4317ac1866e207ba36b1d498196f4
SHA1 0359caf8d5fdb861da1791aa603fd04a48b6db3b
SHA512 aca8f2957b656dcd1ae4c11b4798c70640653483bcf9f7070fbee6025abeff2509775aa0ae54a4cd18fb68441e62f9382fc94c5ea352e882af0d5dc4763898b6
SSDEEP 192:sRExbneKeyrpyhv73pAPRp2huLl84Vy9YHsb+WNnCqG8IV25pSkwrYJVyIsnAUge:sR6beUtsTUX/W0yCwPX627Ske
TLSH
T1F642F82EB914687B9CCBD229FD61772BEBF5102274902E84E6FC8A3C14D75CD622741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 32aad5755a75b8914794c06aa237847da040cfed03185e0796cfba3b73241bec
MD5 d334d72846b45a52bb21f34a31578c5f
SHA1 f395a8c3fb44ed9f6fb6b48c72f6aad83d4afb6a
SHA512 eb81d435b47ef580fc8fa2173af03a51651e573e049a8d5fe02a54f07fa68b8d47c91b61988bac0870cfb330d457c9fcc63301abaaa057221aa828e74caa1e75
SSDEEP 192:aREtcBzb61e0rnhv73pwPRpmThu6rcsl84Vy9YHsb+WNnNSn8IVZvIgMx22eWpS5:aR6mzbylT0XrpV0yCwo865Pj2bSKE
TLSH
T166620A2AB9142D779CCBE219F951BB2BEBF5203265D02E84E7FC8A2C14D75CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 faf205f38f14aaebb964cc4c6cac86c1d9eed1cc4597cf300d120c12563fcb8a
MD5 cfbb6fe69b1dcf37ae21233f58e196af
SHA1 ed1c796023f5198d2aee9d10882084cdf4376191
SHA512 b9f045a63479b9bdf49685c0d4fc4c6a89a446e520e63af89b50cd1c6be690f1e59e8fa198935484ea5c349cca94ef2e2362cf52b4b372d92b7c9f519f144eb0
SSDEEP 384:rVjn27KxkXqKf/pUZNCgVLH2HfgsljM7pLuLcifx8XODnS+ErU3iIHGk0cvXwv:rFn27KxkXqKf/pUZNCgVLH2HfgslM7pd
TLSH
T14A7209A77C4C9E770F94C6CCDC267E4F9CB5024A65E9886883FA982903D5ACF114A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 81a3f841dbea69573893542151edc70890ae32e493e397a2321335f31be4c8b4
MD5 35ba2cbd4ef5ef623edcf95a7d4d4691
SHA1 93b52cd4ad28c4b058300252cb13508eed84a441
SHA512 fde8e330b672ea1fac501c77a1f0570aa6ae2c79953cf9ff60badc8d668b222240ce0c8fad671726068477e51aeb9fdbdf6de22d49510355bbb4542e2e465692
TLSH
T1B0B0129080419581C04302B015E2049C31589F118715130763E47B72DC262B14114250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58500f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58500f.TMP
Size 96B
SHA256 8b6b7f6e8cced5802e4b31d0fdb242d6622d0a9a298e53e409ed8efc3dafceed
MD5 8d98203c456bee7e7773f881cad6ca16
SHA1 4405eb83334131dcd87c10cce8b0d5b061fa4356
SHA512 c8e00099d3d7ca0e6295412115010480e60cf841ffd384e0a6923ffabd26a076e5bbb5f0d41edc5fe1384f6a9b91f73832458087f73133d5082c3973202f0a59
TLSH
T180B022CAC002A302C08203F02AE0E0CC3020CF22CA030B2282E80E32CE303300220030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 69b1f6e9644c347d0ba712e10fb41ba03efe1f36430d0a07f20c9822383ef983
MD5 b266525dce0c0e5d2b2f72ef5a56fd42
SHA1 f35a672a4a7ffe78933cf08ea885bb53d9ec9a3b
SHA512 1d5d5777986540182982dbc3a2bb91658d07fe01b0dbb48a496acf8f63caf71a7d177107b2254f55d23cfc3fa648b64f43720935716ec0b3ae0e691b23b54c01
SSDEEP 1536:85KxOcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9t:8cO3Qw/xLANk0mUW5GmRntSFCjEENV
TLSH
T1299312B94E1A4AF795BE4691725E7C0ACE12130D715FA9CC32A8A39D21C41CD2B73F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 af07781b598124a74cdbda26559fa48975d21b346c40879cbd33772d3ce01893
MD5 956bf2a7e77fc02eadfd7529c6416259
SHA1 38cf30c62dfb801e2f33473e156f66931889c3cf
SHA512 6789f86fdc564c0fc80076be4c39870a836e89e65efa385893b6343aff6e3d16bbcfad96230b5581cd4950520b7e006e596b4815a3a68812f890cd21de57ae2f
SSDEEP 1536:DacYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3T:m3Qw/xLANk0mUW5GmRntSFCjEENV
TLSH
T1889302B94E1A4AE799BE5681729A7C09CD12130E709FB88C7168A78D21C41CD2B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 ad73658b1efacadc1c48f19b6b346541cf9a28e69c7a74bf6379098370695e0b
MD5 00237074c8639b7d1b757b58961de65d
SHA1 e3f9d1925aa315b97cdbfe9ead23db1ef5bb4a86
SHA512 5b8731d2d28ea8c842c192b60f9ae270026189c90ac7e2919182fb7601a93b1d258bf1a64fe618a26d502ac476a24eecbe986ec9521ef58573e51aa01b2e2e58
SSDEEP 1536:556cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEj:u3Qw/xLANk0mUW5GmRntSFCjEENV
TLSH
T1AE9312B94E1A46F7957D468276AE7809CE12230D709FA9CC316CA39C21D41C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 9f447572f7bf58b37fc762095adc9a4e82e1fb9f6736ace0222936f6585ab319
MD5 d86745c9d85b8dabc79b6247443592b8
SHA1 12f6d307ff35cb336d6e84b10d6ff1a287a80171
SHA512 b705801d3f8b7d398f5f438db0c42fca9c3abc6e301b6f7698eb742812b79b883470de767e164fe8e1fd34bee5ef9a31595fb2732ad5a10618df2b7ac7e6bfdf
SSDEEP 1536:D5KxOcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9t:9cO3Qw/xLANk0mUW5GmRntSFCjEENV
TLSH
T1599312B94E1A4AF795BE4691725E7C0ACD12130D715FA9CC3268A38D21C41CD2B73F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 8d62ffa83cc044f1f0cb5947d4c7a60a679cf440d73c48d35d4c9234f37b8b9f
MD5 00d0963638c7fd0f20c66462f338f47f
SHA1 af38216c6cee14094e6c9fc26159c68a8d24b9af
SHA512 4f26bcda0cbf755231982a28d52471a82c7bfda2def718a8034a421623095f44d54350b1d669cddbe1a96d2f16afcaf63b1b648ee1d02240bf8e9643a647bbec
SSDEEP 1536:DLcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3T:n3Qw/xLANk0mUW5GmRntSFCjEENV
TLSH
T1C29312B94E1A4AE799BE5681729A7C09CD16130E709FB88C716CA38D21C41CD2B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download