e20e1691713ae27136d566c8adc5e53d133866c8025a6e19128baae5604df0d1

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/04/2026, 14:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GoreBox.exe
Size 652KB
Sample260421-sam59aby4t
SHA256 e20e1691713ae27136d566c8adc5e53d133866c8025a6e19128baae5604df0d1
MD5 da448b76cbcdb534046456f94f57b500
SHA1 49fa32d8048910e67ead18999dfc3b6f45946ef5
SHA512 349e670e4437390991326c2877e7d41f70cbb4c09ea6e6474a6d06eb7b6aa1685af34df65c5dd2a9321f3aa2a95263efb9351ef5cacd14ba523ce60b13d17bc3
SSDEEP 12288:adVwZpIZkE/kTkkko2k9kkklkkkkksBkwkk/kkGkkkkk3kkkkkMkkkkkk5k6knkq:aPDkE/kTkkko2k9kkklkkkkksBkwkk/4
TLSH
T1A9E485C81999157FE11B65BD13B9E738673A0FD9A40682217CF05D3B6BA3EC53CA3A40
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 4 IoCs

flow	pid	Process
38	460	chrome.exe
38	460	chrome.exe
38	460	chrome.exe
38	460	chrome.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
460	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134212569495036636"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2397528088-2630719772-1129911217-1000\{9BC32F3A-CA23-4F24-B988-6F54311D55E4}	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
1916	chrome.exe
1916	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe
Token: SeShutdownPrivilege	4280	chrome.exe
Token: SeCreatePagefilePrivilege	4280	chrome.exe

Suspicious use of FindShellTrayWindow 59 IoCs

pid	Process
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe
4280	chrome.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 4280 wrote to memory of 440	4280	chrome.exe	80
PID 4280 wrote to memory of 2764	4280	chrome.exe	81
PID 4280 wrote to memory of 2764	4280	chrome.exe	81
PID 4280 wrote to memory of 460	4280	chrome.exe	82
PID 4280 wrote to memory of 3308	4280	chrome.exe	83
PID 4280 wrote to memory of 3308	4280	chrome.exe	83
PID 4280 wrote to memory of 4884	4280	chrome.exe	85
PID 4280 wrote to memory of 908	4280	chrome.exe	86
PID 4280 wrote to memory of 4884	4280	chrome.exe	85
PID 4280 wrote to memory of 908	4280	chrome.exe	86
PID 4280 wrote to memory of 3124	4280	chrome.exe	87
PID 4280 wrote to memory of 3124	4280	chrome.exe	87
PID 4280 wrote to memory of 4732	4280	chrome.exe	89
PID 4280 wrote to memory of 4732	4280	chrome.exe	89
PID 4280 wrote to memory of 4232	4280	chrome.exe	90
PID 4280 wrote to memory of 1588	4280	chrome.exe	92
PID 4280 wrote to memory of 1588	4280	chrome.exe	92
PID 4280 wrote to memory of 1752	4280	chrome.exe	93
PID 4280 wrote to memory of 1752	4280	chrome.exe	93
PID 4280 wrote to memory of 5468	4280	chrome.exe	94
PID 4280 wrote to memory of 5468	4280	chrome.exe	94
PID 4280 wrote to memory of 5192	4280	chrome.exe	95
PID 4280 wrote to memory of 5192	4280	chrome.exe	95
PID 4280 wrote to memory of 2244	4280	chrome.exe	96
PID 4280 wrote to memory of 3960	4280	chrome.exe	97
PID 4280 wrote to memory of 5148	4280	chrome.exe	98
PID 4280 wrote to memory of 5432	4280	chrome.exe	99
PID 4280 wrote to memory of 5432	4280	chrome.exe	99
PID 4280 wrote to memory of 224	4280	chrome.exe	100
PID 4280 wrote to memory of 224	4280	chrome.exe	100
PID 4280 wrote to memory of 5900	4280	chrome.exe	101
PID 4280 wrote to memory of 5900	4280	chrome.exe	101
PID 4280 wrote to memory of 4704	4280	chrome.exe	102
PID 4280 wrote to memory of 4704	4280	chrome.exe	102
PID 4280 wrote to memory of 4672	4280	chrome.exe	103
PID 4280 wrote to memory of 4672	4280	chrome.exe	103
PID 4280 wrote to memory of 3620	4280	chrome.exe	104
PID 4280 wrote to memory of 3620	4280	chrome.exe	104
PID 4280 wrote to memory of 5028	4280	chrome.exe	105
PID 4280 wrote to memory of 5028	4280	chrome.exe	105
PID 4280 wrote to memory of 5032	4280	chrome.exe	106
PID 4280 wrote to memory of 5032	4280	chrome.exe	106
PID 4280 wrote to memory of 5984	4280	chrome.exe	107
PID 4280 wrote to memory of 5984	4280	chrome.exe	107
PID 4280 wrote to memory of 1544	4280	chrome.exe	108
PID 4280 wrote to memory of 1544	4280	chrome.exe	108
PID 4280 wrote to memory of 2112	4280	chrome.exe	109
PID 4280 wrote to memory of 2112	4280	chrome.exe	109
PID 4280 wrote to memory of 684	4280	chrome.exe	110
PID 4280 wrote to memory of 488	4280	chrome.exe	111
PID 4280 wrote to memory of 684	4280	chrome.exe	110
PID 4280 wrote to memory of 1916	4280	chrome.exe	112

C:\Users\Admin\AppData\Local\Temp\GoreBox.exe
"C:\Users\Admin\AppData\Local\Temp\GoreBox.exe"
1⤵
PID:1804

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc65fcc728,0x7ffc65fcc734,0x7ffc65fcc740
  2⤵
  PID:440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,9271476346992702124,16917059053077213903,262144 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,682323960028078830,16333795766066185427,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2272 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,4415754643648825552,11125663862748451087,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2400 /prefetch:13
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,868979711731893491,15199052776389800228,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,7481175631493283709,13535461476363698467,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4224,i,10677084365507388767,13498216395967575416,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4232 /prefetch:9
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,10423397283725194517,3307396279828697758,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,16706942954211402018,14422835240475104482,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=6016,i,4132530551562723441,11639338873944330199,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5688,i,15036398181841025309,5220009957298263360,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3868 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3388,i,13394647577955282777,14389422617260957714,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6008,i,4611069125383210195,13057113028950499694,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4576,i,8468822241081884317,5810754378773537630,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4564 /prefetch:14
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5812,i,4438625405745763181,7282784974851026031,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3284 /prefetch:14
  2⤵
  PID:3960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,3769271541959798037,12358872932119382694,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3264 /prefetch:14
  2⤵
  PID:5148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5896,i,13200058712116489374,3942042861960138526,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5804,i,5739973068827221402,15885756527712675086,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5892,i,10805199052301555982,7927511079339001424,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5552,i,383338318840668433,7413060183245768772,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5940,i,16978414193467689015,8959273862609490715,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6296,i,7315175274120770727,4850522811151521565,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6440,i,4259734163360092433,11268777438305678816,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6492,i,4000972108738629720,15288732691222506516,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6660,i,2528712771572886202,13302899657895205525,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6840,i,13442203060664110411,14123217765051392634,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1272 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7004,i,12751531265115499360,11484712072709598234,2097152 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7008,i,10640818513126337470,12078704082996483185,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3856 /prefetch:12
  2⤵
  PID:684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,16224112981736667289,14973912970442634904,524288 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4588 /prefetch:14
  2⤵
  - Modifies registry class
  PID:488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5548,i,9203631966565861598,2647744694826252521,262144 --field-trial-handle=1900,i,6644835177439199672,6685387487458266162,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4256 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1916

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1796

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a489fd5acea17f9adabb7d1165da65b7110030c5e019f641e873a8da5281a620
MD5 3251d1ad90ab92bfe10b3da739e78151
SHA1 beebe9dd2d323061e020025cdbdb2f3d2996f143
SHA512 8daaac6810f5d01f2a1326f4919b6b7c785949c48b0b9812932f1c408b7f2717c1f3f6afb46732c740edabdd693573977e71767f2aab9a9ae9bda43f66df7bb8
TLSH
T1EEE02BAAC825DC370CFE071850D04752F74117972B40451B7E3D920D8F7063E0585C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 6005119a2e2cadc6e85ea752331eb3b9c037cb3f2feed78347794aad9c666232
MD5 0be1a49012a983d61981bd638d6598e5
SHA1 bbadcd735024d78d12fd2e38a90117268542e5b0
SHA512 f5290f4d2cac88814b630b52eed5b8d4a6dea36d21d9406cfe867b08e9a0e5648fbe8ecf95a623d81de724b6105a6148bab783eb5b40df9e6f652879436a9a59
TLSH
T13C31EDC48050D82AFB4A2AB75DF0396E3D35E66CD0572E7A8CF8987C60423CB49E546C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 e40a0e36179c7589dcf5e6b6fd0ff43bb2fab82a179d0a04f48440b58d3b8ffc
MD5 2d81e6ecd17b7f08b54cd968f8a431c2
SHA1 78466ae77e998058690be6437ca14c419544cb77
SHA512 e39b31bf007b206189f2ecced570e25bbbb8aee78cf090dda223613e4b2bc3ee857244e48d355ee60a6b174c42f6da137a44bc3c75aeb6419afcbfa64650619a
TLSH
T17231FCC48050C819FB892ABB5CF0386D3C31EA6CD0972E768CF4987C64823C749E446C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 576fb23e535a4799dbe1dc8970ef09c9dd13594714e63019d75a8f2e927e1f55
MD5 ffee47a3f33067ad169d0d9f4865bcb4
SHA1 e8ef4b46d86da8b25927b2e6327e0855c0430da2
SHA512 85b54fa17f68e31f737571a9a7c41a8d370bc241943de050e2ab4bed785cdaee323dea7d5c828c0e7c119b6b88b36093312c0a01b69feb3f4f23fea8df7fc157
TLSH
T101B012100B82C091F740233048942C83742009794232351248C020584501760C0440CE
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 8d8d7167bdc80c2c0d7aec35e5564e78c1b4fbf8e35915b890b5c3b0ff76209d
MD5 ca43722cc4531031617e5254cc5080a6
SHA1 2c1b1eaed6ae0d989c0d449135ef3b5ff2d5bb6d
SHA512 a016fbd289ccd484b81c1b1a2c3deeab3d1ad9ef96c5fc5724549d82c369c8ad02ecf8f5629881f2915192427d1d9bb9b59e013a7ae79fa7ed53c238d1aed70c
SSDEEP 192:DZRx6GqSG9baIaF+hwN7QiKw25umwHnWM9MXk+XmXIsb/hLKXDQt8oNu+3s8AjB2:DZRx6GqSG9baIaF+hwN7QiKw25uZHWMB
TLSH
T11E228DF783F88A6EDD1162F4AA282E17CE590915432C3D5BC5E4AF0B57F3875E240A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 3272d4f1662227c29dcd3e72b9c5c5a6778dd626630c5b10d32fbe63565fae6b
MD5 5a213827dbd173b5e03f0bd3aa5f76c9
SHA1 e5ed8a30e27ab884bf99facb43a92e82854efc2b
SHA512 e4c9084edac00b5f90a6a66ff38ccd1efd89f000faa7d710f7e56ba1c67177e439c683e8dc239c04b33e46b87090476abe0bbbfbe644f6dd81349f689176acaf
SSDEEP 384:DZRx6GqSG9nfki2FScaaFiwN7QiKw25u+WM9MXk+XmXIsKhWXDQt8oy+3s8D3kJ1:2JkYTv
TLSH
T1E052ADF7C3F88A6DD81162F4AB242E1BCE590914432C3D5BC9E4AF0B57F2875E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 808ffa4fe6f4602f1037aff61c8c2f41a598297a6818514d47ce592e7a914e59
MD5 e6ee5c78daca9c2d5d180252dc785f2d
SHA1 4329dcc75f5412075aa3e39c6a91cac9325c0f06
SHA512 4d992520444f6a2a54d97ff945c0bf2711cedeebf22f00cbbfa0c35de9abf31cd33fb6d860d00f42e85c9c28ed7f13a950498472fc2c2cbd9f57f11b8cebf210
SSDEEP 192:wRN+WHJP45v7+FhAPRp2TF9hHsb+WNnuuKJN21kMKD2Uye7PaVVyIsnAUgtaJ:wRN+lZ6F8XAbw3u2qMKD2UTaD8
TLSH
T1CB42E82EE910A5375CEBD229FE617B57E7F6102161901E88FAFC8B1C15E75CD222702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 051632c85e6bde676f28e1b55affed3f740e5af8eae91468d6b40c72f6c3b522
MD5 90b69a97026203ded73551b7bee2f043
SHA1 0af44e4a0cbe24a42fc056b2e2110e495a52b6ba
SHA512 a951e0ebe4384eeec6383513f323fd5b89d91c049dbb2b0e2c95ce4a46ac09cc3c3ec6bbe9303d639aea380b4a1fa33afb3dca620cb387bfee22cbd458df963d
SSDEEP 192:wRNuWHJPI5v7beFMcPRpS6ZzXLRmXv9hHsb+WNxpyAM1uuK1Re1kMKD2Uye7PaaM:wRNuJZGFVXkbwSRmeqMKD2UTaae
TLSH
T1E862C56FE82069775CEAD225FA61BB5BE7F11021A1901D88FBFC8B1C15E76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7409a03300f3516df49209d8beb34edc41be4982cc8b2bf947a2b9df82ab736b
MD5 5cb2f401161548f6c26f6d37ce7da771
SHA1 c3f2db36d9051facfa9f86b98b7a248e58f6e7e5
SHA512 543acc88b66bf5efbf03c89f01ae5889a5576b505bc3b2ecf078969482c9d80b47b9adac44dd99e5ab7359245b7eb88c29a1ecac7fd1163289ed7d023738752f
SSDEEP 192:wRNuWHJP45v7+FMAPRp28Fmrv9hHsb+WN7yAM1uuK1Re3kMKD2Uye7PaAVyIsnAq:wRNulZ6FtXWbwSRme0MKD2UTaEe
TLSH
T13B52E72EE950693B5CEAD229FA617B57E7F2102161C01E88FBFC8B1C15E75CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
MD5 80e775e497e26256725722f158c1a7e7
SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
TLSH
T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5f9270d3ddcb1dec3e75c84137fd4cfadcbe0cf61b8a3b808e640e57d566ce99
MD5 00f31bee7595df8a022686b045a647a5
SHA1 fa2365992d025a4cbad14b4049cfed73da7a8d71
SHA512 c724f8b78855d4f6eefe57e3d62b7f000dd763d6bb1faac70b6eab62c2c50db89bb2d85a4f97a3e3c3792e2da8f0ec7cfd11f82a09939334cd7d3198c9509b9d
TLSH
T198B01218C002A942C05702F015D248C83538AF209745131553E06971E82B7E14125190
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588596.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588596.TMP
Size 96B
SHA256 6eeecadd7110692609596f54e64bc5555a132b06f7361c28b43314260068c664
MD5 c211942bd4e608f90e6663f65d050b7c
SHA1 d232ebd1af4a5dfe48e2532a07f3ff42ffa969ce
SHA512 9f8ac3083b3bcd9a7b7ca9e2e7e695ee9eef5b1b7c8e53acf07e86cc08404d6bfd6225b54234de63b5b90c783c3e3419b749a459dce0812122db80d1197b09bf
TLSH
T15FB02200C202A302C08203F02A82C0C830F0CF20C203030282E03F22EC20B300030020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 7ce49094fee46e5f4fcb42503adc843d1bda83fb19a4fea67abd01ec35a845ae
MD5 23438513836e16f43db35e0fec990040
SHA1 427567b77a57509b5285b845effa510337c02687
SHA512 d0fd0a9d0cfc21afe15ce15038809f6e50b17a93d87bde59db16df8120493bc851f5e0d8595bdf2a5a2ab2f39878bb48a0b38b9a4537072f4ba24ca5ca4cec63
SSDEEP 3072:37tLn4S8GqEYfMFgU+0RSlbywsmJdAv9u++J3qUQm08KMWF0bFTcVHr6zJ:39wGBH944Q++JjcMW2VcVL+
TLSH
T1181412F6E41D7C7A179EDAE6801FFC7BC883948E59065A3C3086BB2E044D2E39396495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 70ff10cad3673dbb8994a84f4720ae30404d32ab8908d934bd707f32d6ff1f03
MD5 f9d488c6a8528a0c70a0bd45567bc56e
SHA1 d430b505965a3199c75f1924d6fe80a064260b46
SHA512 f19f9329f5c48382ab70284038efe495eabd9acecca4e0327d5c375daedd4ff0beeb82e89241cd16e36fc013e9d6994f05f8be56c0aef2bc89de2f470b417085
SSDEEP 3072:B7tLn4S8GqEYfMFgU+0RSlbywsmJdAv9u++J3qUQm08KMWF0bFTcVHr6zJ:B9wGBH944Q++JjcMW2VcVL+
TLSH
T1231412F6F41D7C7A179EDAE6801FFC7BC883948E59065A3C3086BB2E044D2E39396495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 e551542c4739f41da83b199662f9ac42e4b24e8edc3237d7823aaced9ebaf251
MD5 35b103af0866f78e38fa56363a013d0f
SHA1 7a44a8cc8c19eb7a73a7df59c45a7af0728c50ae
SHA512 86ffdb8ff4d6b56029fa87627bea3abb0000a49ffb9bd55651bce2fd9447e4c748de629e9b4131488d24b48151495e29b94fee0cf20f3e26b75fb2a5a44cb5cb
SSDEEP 1536:eGW8wP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:p2++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T1379302B9991E7D75636AC6D690079CAC88E3DCCE1514117C30C7AF1E14BE393A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 3b9369e33b38684357df1468ac44802c2a903a8efb3d8e0e32515eaf66b145dc
MD5 72f982ab5157b7f503621498450d1ac0
SHA1 4451bea750edc40a6ebdfc7a90a7faa0eee67ced
SHA512 3e17e2f8d71f1d8bf8e4e5da895ec92b75935559fcdc0e56aff80ab5c1acdd44f549fcc1ec18c167ab5c868be2fb1449f516d208cc3868d2b17501f5162da573
SSDEEP 3072:w7tLn4S8GqEYfMFgU+0RSlbywsmJdAv9u++J3qUQm08KMWF0bFTcVHr6zJ:w9wGBH944Q++JjcMW2VcVL+
TLSH
T1991412F6F41D7C7A179EDAE6801FFC7BC883948E59065A3C3086BB2E044D2E39396495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 393eaa67af118b9bbad425dc22afeea8e6cfefe6d54301546c08887d181ffc3c
MD5 ce7b46e5ec89ed9eaa1c11ea754611e1
SHA1 2673d862e164d89d4e812589ec2605619cc83a80
SHA512 b93afe3306db4ee0ad0e5bc965f56c8be6a5b3159d6e080078c8659aafc8ee3395093ea02c538e044d6c425c520631c2b19b1baa8228453749489fc51ca7aff9
SSDEEP 3072:DTftLn4S8GqEYfMFgU+0RSlbywsmJdAv9u++J3qUQm08KMWF0bFTcVHr6zJ:DT5wGBH944Q++JjcMW2VcVL+
TLSH
T14C1412F6B80D7CBA1B5ADAD5401FFC6B8CC3948F5E056A3C30867B1E044D2E3D656895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 c6427aa206c353bd763987642e97ffcd7ab4af2ca98bb4075a910face2ab0e71
MD5 442c87680d1c8d1306a452ecd59210fc
SHA1 237c0ae8201181358b09ed920bad58ffd3769018
SHA512 ab88f5e974bc31cac2982884b102eb998b5df201c5decc3d0433b17773aee1df6a66e9b59827169f4419ef5eb220eb3eb7d3d8a775b96e077ee91e6efda01538
SSDEEP 3072:U7tLn4S8GqEYfMFgU+0RSlbywsmJdAv9u++J3qUQm08KMWF0bFTcVHr6zJ:U9wGBH944Q++JjcMW2VcVL+
TLSH
T12F1412F6F41D7C7A179EDAE6801FFC7BC883948E59065A3C3086BB2E044D2E39396495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 325604.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 325604.crdownload
Size 174KB
SHA256 fa46e80566ac59a23ba571389386a6787daab8d269d4aa77995cc91f76d9462d
MD5 f288e9a24c5982a28d22ecb4eaef8908
SHA1 c027ef102e3ec82fa226434f5995c9f7a78e6f41
SHA512 4ed5b0839ddfa15ec563aac6e483212a2e4d32ff96b244af6a9fa9a7c3529887b8abccb4f3b17f507ab242a9eb37d8167b8ac287ceee51406ede39c820246337
SSDEEP 3072:6LSLCyHrPRVwjZSSecVqyFjcnlfAK3VPl2l14dJkVH5nfeRl//bRRlTHGeZ19vqY:6WmErD6ZSRcVqvZn3VPRVdZ1EvO
TLSH
T1D6046A8236C188B5E57254321A65DAB19A7DFC700F24DDEB33947A3B0DB42C05A36F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download