hxxps://flingtrainer[.]us/kingdom-rush-5-alliance-td-trainer/%20flingtrainer[.]us

Resubmissions

24/04/2026, 02:41

260424-c6e7hsds4v8

24/04/2026, 02:35

260424-c23r1sc13t8

Analysis

user interaction
yes
max time kernel
248s
max time network
252s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/04/2026, 02:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://flingtrainer.us/kingdom-rush-5-alliance-td-trainer/%20flingtrainer.us
Sample260424-c6e7hsds4v

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 3 IoCs

flow	pid	Process
97	3124	chrome.exe
97	3124	chrome.exe
122	3124	chrome.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3124	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134214721283983368"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3920	chrome.exe
3920	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 41 IoCs

pid	Process
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe
Token: SeShutdownPrivilege	3080	chrome.exe
Token: SeCreatePagefilePrivilege	3080	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe
3080	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3080 wrote to memory of 2132	3080	chrome.exe	80
PID 3080 wrote to memory of 3124	3080	chrome.exe	81
PID 3080 wrote to memory of 2896	3080	chrome.exe	82
PID 3080 wrote to memory of 2896	3080	chrome.exe	82
PID 3080 wrote to memory of 4168	3080	chrome.exe	84
PID 3080 wrote to memory of 4168	3080	chrome.exe	84
PID 3080 wrote to memory of 496	3080	chrome.exe	85
PID 3080 wrote to memory of 496	3080	chrome.exe	85
PID 3080 wrote to memory of 4936	3080	chrome.exe	86
PID 3080 wrote to memory of 4936	3080	chrome.exe	86
PID 3080 wrote to memory of 768	3080	chrome.exe	88
PID 3080 wrote to memory of 768	3080	chrome.exe	88
PID 3080 wrote to memory of 4176	3080	chrome.exe	89
PID 3080 wrote to memory of 1432	3080	chrome.exe	91
PID 3080 wrote to memory of 1432	3080	chrome.exe	91
PID 3080 wrote to memory of 868	3080	chrome.exe	92
PID 3080 wrote to memory of 868	3080	chrome.exe	92
PID 3080 wrote to memory of 4728	3080	chrome.exe	93
PID 3080 wrote to memory of 4728	3080	chrome.exe	93
PID 3080 wrote to memory of 2520	3080	chrome.exe	94
PID 3080 wrote to memory of 2520	3080	chrome.exe	94
PID 3080 wrote to memory of 2628	3080	chrome.exe	95
PID 3080 wrote to memory of 4900	3080	chrome.exe	96
PID 3080 wrote to memory of 1420	3080	chrome.exe	97
PID 3080 wrote to memory of 436	3080	chrome.exe	98
PID 3080 wrote to memory of 436	3080	chrome.exe	98
PID 3080 wrote to memory of 3396	3080	chrome.exe	99
PID 3080 wrote to memory of 3396	3080	chrome.exe	99
PID 3080 wrote to memory of 4500	3080	chrome.exe	100
PID 3080 wrote to memory of 4500	3080	chrome.exe	100
PID 3080 wrote to memory of 4424	3080	chrome.exe	101
PID 3080 wrote to memory of 4424	3080	chrome.exe	101
PID 3080 wrote to memory of 4056	3080	chrome.exe	102
PID 3080 wrote to memory of 4056	3080	chrome.exe	102
PID 3080 wrote to memory of 4956	3080	chrome.exe	103
PID 3080 wrote to memory of 4956	3080	chrome.exe	103
PID 3080 wrote to memory of 3548	3080	chrome.exe	104
PID 3080 wrote to memory of 3548	3080	chrome.exe	104
PID 3080 wrote to memory of 868	3080	chrome.exe	105
PID 3080 wrote to memory of 868	3080	chrome.exe	105
PID 3080 wrote to memory of 3628	3080	chrome.exe	106
PID 3080 wrote to memory of 3628	3080	chrome.exe	106
PID 3080 wrote to memory of 392	3080	chrome.exe	107
PID 3080 wrote to memory of 392	3080	chrome.exe	107
PID 3080 wrote to memory of 444	3080	chrome.exe	108
PID 3080 wrote to memory of 444	3080	chrome.exe	108
PID 3080 wrote to memory of 4128	3080	chrome.exe	109
PID 3080 wrote to memory of 4128	3080	chrome.exe	109
PID 3080 wrote to memory of 840	3080	chrome.exe	110
PID 3080 wrote to memory of 840	3080	chrome.exe	110
PID 3080 wrote to memory of 4012	3080	chrome.exe	111
PID 3080 wrote to memory of 4012	3080	chrome.exe	111
PID 3080 wrote to memory of 4920	3080	chrome.exe	112
PID 3080 wrote to memory of 4920	3080	chrome.exe	112
PID 3080 wrote to memory of 3912	3080	chrome.exe	113
PID 3080 wrote to memory of 3912	3080	chrome.exe	113
PID 3080 wrote to memory of 4296	3080	chrome.exe	114
PID 3080 wrote to memory of 4296	3080	chrome.exe	114
PID 3080 wrote to memory of 4308	3080	chrome.exe	115
PID 3080 wrote to memory of 4308	3080	chrome.exe	115
PID 3080 wrote to memory of 4856	3080	chrome.exe	116
PID 3080 wrote to memory of 4856	3080	chrome.exe	116
PID 3080 wrote to memory of 3920	3080	chrome.exe	117
PID 3080 wrote to memory of 3388	3080	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://flingtrainer.us/kingdom-rush-5-alliance-td-trainer/%20flingtrainer.us
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ff9adc4c728,0x7ff9adc4c734,0x7ff9adc4c740
  2⤵
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1444,i,7276203700231205394,2355475207694357118,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2124 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,15078802190203294211,5355259703506773199,262144 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,11715810222034170792,16576256785448394877,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2376 /prefetch:13
  2⤵
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3204,i,8676616527227499806,12976413497825627400,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3208,i,11953123685993415904,14674017265474337845,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4232,i,15315659660234742642,1748288169997564663,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4184 /prefetch:9
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,8643135888073261789,7073334662406958230,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5644 /prefetch:14
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5680,i,4648195259124458190,11900574994297796666,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5664,i,12791347093556246418,10422802885630953427,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5000,i,14449638065248731540,13901468828402776123,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5756,i,470036770371258995,5103737573680952658,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4884,i,4840692776458860001,1631436906653938264,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6040 /prefetch:14
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6012,i,10063532632477415993,12825236482913001625,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4792 /prefetch:14
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6044,i,18410153707645295354,11623069035385746534,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:1420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4348,i,6371668326751492834,2536335427539848608,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5904,i,5066508238564310980,6616124544525913471,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4224,i,2062812678931879291,12439371517579032079,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6048,i,8832939952839831181,3206051333332241659,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4724,i,13247417073898343787,12688171281157424040,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4292,i,5552833379769736652,11039255111875063497,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6120,i,3276372602198933301,9576911183161640091,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4876,i,7780343027344863188,8791497331558158255,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4864,i,8181914341994412063,11184220813033235248,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5812,i,9688034979158787029,9336417057527274766,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4868,i,4033054486767312020,49560567660112483,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5780,i,14555221288855056163,12513911096144929810,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6028,i,6046301302077396052,14240188582079772599,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4868,i,4263869226699010993,16234089320422532441,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5852,i,3421795669188649631,7193373612457331209,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=4316,i,11154299592824269269,14630903959899876988,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=4228,i,16167671007039771660,11732420607521254320,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5924,i,3105337410064767128,6559678695772634736,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5808,i,9324339540968817962,9811341817206157322,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6196,i,16471283725978900431,14408642633165844328,262144 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6292 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5692,i,4648301408980825496,8257995159948701732,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=4884,i,9441281420261399200,2493614379366059089,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6316,i,11837573738607115726,9220451299070382713,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=3720,i,9598410965342237784,7332601777727820515,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1016 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6216,i,15923529447265483604,4633322873820205510,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=5664,i,4038422204429743845,4655608697152013183,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6276 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=6632,i,582989610332377965,14832299586733455738,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,16065407214122353016,16364088748590466629,524288 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6420 /prefetch:14
  2⤵
  PID:2116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=4796,i,16726108244624061303,15098825761020448752,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=5840,i,5481866665349821591,15964618434332032255,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=6196,i,15967098339212821620,9683363046435597710,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=6260,i,8626488004380592130,9874641834539550416,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3880 /prefetch:1
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=6688,i,15829584699476627529,7084885120724072948,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=6196,i,12401720142910641654,9776506349809290422,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=6252,i,9845924572079046550,90610532929050644,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6708 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6668,i,13396785555238492443,14316467903455052447,2097152 --field-trial-handle=1952,i,7721114640117932899,11958087045580187229,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:2348

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3104

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d92f42bb5f2d0503300b7946bc41a2cef996c9714e54c2bb865914f287fb5ace
MD5 f171e3c528f288857ee43b48ff662fb1
SHA1 d7fe06dab3171ee2b48c7fcd90dd2102a42b2ec7
SHA512 07a1f3ea22433bc9d53116b19dce478ccdba2f54275176da8ebb2e5d67350c48f20da9953c038c9834ffa75a8670c18253e45288e0e2630a1782704addf15ad0
TLSH
T1B7E022AADC32E83B48FD0B6A60108B86EB50031B2B40854F3B3DC20D8FB063B05D596C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 146KB
SHA256 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
MD5 d5e647388e2415268b700d3df2e30a0d
SHA1 97f0942c6627ddd89fb62170e5cac9a2cbd6c98c
SHA512 50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6
SSDEEP 3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5
TLSH
T103E312E8C98E8E24452E2B975B436D4CFCA1C97D77BFBA0E2B5401B94F1E0521B34A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 23KB
SHA256 9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849
MD5 747442fa76f1d9a31f9a54a2e8a4b448
SHA1 07fc0ae14bb3187839082aed3bca11dfb1e04524
SHA512 274dbe5bc31c560d2cc2d15afe5485687b2f7dd0ee24ffed99627310ea36a6a3cc1c91e22368f909d056f4faab051838d469e0bfe8a30169b735aca5eb0f402f
SSDEEP 384:Ok8mTTNu15tM1xuB9dYY7YRHmOdjzUJsAr4p8Oq7kpPyXBpqrhDRBybCpMuT33SI:OGg15tM1xuBYY7YRHmcjzUJJr4p8Oq7a
TLSH
T10CB2DF2CEBAB2746C908513A2EC4DEEF3DAC1B674D0461298C45EDECE8847281D9C964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 22KB
SHA256 a34d8aff0474230a63cfa1f7b880197f212986c75aac6ccdf31aa63f98ceed7d
MD5 ebadee426ad7051bfcc7100db77967fb
SHA1 015d4f15deab7b3e278ab6fecf66368b6959fa63
SHA512 6ed428e3d490356a13c13ce9a4471379b231f5ab2a27a3e93fcd05690a4a40f3b40476ec7d6494757da51fbb8846f9f291da7a8fcccdfac078a5104eeb45eea2
SSDEEP 384:XBSof2e8e0uegfqeWjOb12/GhYLkxbzHn966JwPGg3J7LjBZbxpN8WVMMbP76nsB:RXGJSb12/A1nU6JcLzbxpN8dAmnsvug
TLSH
T1DFA2D0623075CB5F52EE91A5854621A130649CE80843F6BD8DDE0364DAEC6B40FBF6F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 29KB
SHA256 521f1aa84dacf998911e1874ece5d240f4d2cbd71fb7d6eb3ef9b805b2a91aee
MD5 506765c5708d241a89dfe7b139731e42
SHA1 150e865914568a0f2deca646fb2670b210435563
SHA512 04d0a03bda24792c584be4c87fc35c5877f832356335cb399448ecb6a5171daaee2f5c6d2f3ca41fab87f4d41831aa3dd843bdfdbe6d4eb39db6bc58541aae7b
SSDEEP 768:dF7gRXy0duCQup2NvVlLVDk7JVGwpDbse44S:7gRXjuUyVs/tpHse44S
TLSH
T104D2F1525B6F909528CC8FC584D04A5460A8C361EF2FDB5BCABBF95CCF6CF056A2642C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 156KB
SHA256 75d6c4b9910d07d1b137b0db8306d983c1e89c4e0da85a5798a91da9ac92ed4f
MD5 ac9d385a1db2a9cbcc10e134c1941d60
SHA1 454684870921de7506f1078ae15b0811ec40419a
SHA512 3055abf7ed999498559685b79f3f4f1c583daf8509b8a1396418effe7b85c6dd088be7ca7eee090a727eafba85475bdb9ef54960dbee06bf1299327fd10b3c74
SSDEEP 3072:p/Ym7AhTmwbZnpY2HDhP5sqGc8+wIK43HquvqucjyTLzF6oxpjHr:pd7ATV/HdP5sqGc8+CLuvqzyXh6o3L
TLSH
T1EDF312375029BE431E989B9DFC7828E057C0C1822CD740EDA958A7FE8DCD929560B6C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 54KB
SHA256 2d1e6251074ae79bec29916a19a1b2866ad0a322656ee7e9dedf484d9e97c0a3
MD5 4ab02bb2a88baaeb47f83a8c61f6291f
SHA1 0e31227bbbaaa74ab4aab67e207b275d07c9df66
SHA512 c8ce12da0e87f186b8e841f0c63ff152360550ce17650df0b5846d4cd021a918937636fcd915b1325c4820e0bf43ac458cdaa904b632f0641ae90fbd728150f3
SSDEEP 768:j1pWtLCY/kZJoeYc1Yy4om8y0apxyPLizeaz+yHyKhLX6R4yjrgEcYGd:j1ctLfIoez4om9xqKeazZqW2cYk
TLSH
T1D84302DC09E6E2066B60F95447916E994B94FF65CCEEF1F1DE20906E08E25DFAF09C01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 46KB
SHA256 14f23757c6b41b4b6c0b967ca3fa74ff47a868728158373461c4e6e4b6368f19
MD5 2465bec3a1d5ad40ceb1828a07763d2f
SHA1 656fca193330ac8ec592a0942f4e7d718fa69cbf
SHA512 171195e97870d0794a5762cb3324c2994542a534f4e8ec490400f5667527c48c0c2814071fe9449f4d78169b2d35228466cfadea81229f6ebddf791dd3fb2099
SSDEEP 768:/FAcvRO+HWzD3hVYA6By+jNbKulKiuJ+YAnmWjKiXN0EoGlknbxWuFYCrJRSx89Z:33sD38k+jYulvuUHnmTq0bGlyFWuFYiV
TLSH
T16123F16CA80DF34596FAE4F76B11FCEBF248BC9177C5EE10278C864D8575AA5CC28241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 20KB
SHA256 2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed
MD5 8feefe1e602c4b14ff414a77c3af2c2c
SHA1 e57daae78e76c8944e97edecfa656f8608e09db5
SHA512 893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92
SSDEEP 384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR
TLSH
T18792E056B288746A77E4E3ECC859AE6C65ED9B0F0C1B15B909322122F196C4734930F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 40KB
SHA256 7cb4281a0ccc84cc18617842c639fc66541cbef94a9dd245c754700210b4fcec
MD5 1097956fa17313da073e6216a7ce860b
SHA1 205228bc618a378a36ef6200894c10aa1decda09
SHA512 d2f56f8ac5c1d6923329a6f731d4363682a336496eb70b7b097f463e49ab98ac2b647274a3ec20d7100a423be87544ac0695664ffe7fb7e75b4794aad9838bae
SSDEEP 768:TGU5B51vUw+tWqAGDH4WfomxkTXmXCoGCUjNjI6kBt8rx2rKCyrFAPkzFe:awBAbUqAPdT8v/Yj/UrKCWne
TLSH
T108030281E1301FCBD501E8B666BFB868EAD51E5458E312B596F3C614C05B0EBA35CFC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 177KB
SHA256 c20f2cb280a4602159e4b44e6377cca467a822a40e065e59627a5c11dc8c3b33
MD5 a44eab09f4ff216ac3feffffe6259db1
SHA1 4bdf20d7ad9e169a6f6a612069e7184e967f24ab
SHA512 c47028f6cb1994752a624bc91014864cb9aec369ffacd99532781cbe455e44787eb0c7149bd08f2dac99552286ffca7002a0cc816f3726dcabd9c610893d17d0
SSDEEP 3072:ieByj5D8mK5lRmzNMicBlfG4M9fwr768VbrkHu9s6V3AcoKazZAV0wgbSh:ieBc5D8mhM7fGL9fswu9JVQcoK0wWi
TLSH
T1C10422C3C6F84BFE2A495AE49547C0A7147D44C6F8DA04842271B38C2866AD5FA78C7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 88KB
SHA256 10b748cc3b85c0dcb7949ec13849d5e58e48ebdb8433e08110713d51894f4522
MD5 8c99719c4fd68109866fd250f02d8ad4
SHA1 3308397ccf7d9005ba55be1acd4a43798ecb3449
SHA512 f75819e1f141962166e1f7c05b57a0a79dca294682d8b08656f25e78ea3b570fa7eb6c74f5631bfd06c07b4679ec556de9fad43b26e2ee05cacc844499f4e5cc
SSDEEP 1536:n84lU3EuhHHe5ZIzd6V11g54eTKKcbIIn1gglP+a9j9aqbFX0GJdU+Yfa70TtjNS:5whHHZR6V1up73IFJ+5qbFkGJdUfftj8
TLSH
T12B9312906DA43F17CA25B2F086260B6D6268263D95ECDF725387F2FA378324165053AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 129KB
SHA256 8457d234ce73effb44dc4c42abf28453628eb3d406f340c6750f4b5d90f307f4
MD5 78487b480cc9148c08a1636b19c58097
SHA1 18da71029173afdec75e11d549daddb9ce544fa6
SHA512 5c867fd553d17e8f71ba9ac3d60de11c95594ddda707d26d05c7f2519b95422bf3b671a5fdd04f7b4549aef7fb4865972482d79af3b90adb8a45d23717b5880f
SSDEEP 3072:iuqUpM+2McwDXEYm5VtHYN8LpyekU+DsGKgNIvyTO049MOlqghV:5TpM+hnFm5r4mL4etUdOlqghV
TLSH
T1C8D312EC779DB00B623A63F964256AA118EFF40E81CD8D78E129B361476883277B85D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 889KB
SHA256 e668543d6b663c4a21d79215ebca9286cd16d0ff7c4841e0f63414dfff241557
MD5 f2129af8413014b9a148d1e91a39600c
SHA1 a13f752edd73b6d33aba7a12e416f264c3483f3c
SHA512 a6bfe52a65650f9b0bd3ca786d72524062053d1380b3d2b88eb4ce5a82ba2fbac1af2846ff643735e359ccff21347024f8e39958e657f43a4f443feb97b939cb
SSDEEP 24576:8yvZyhtd0nf2wV3ESoynlI9yWftUlOLaetUfs:jZynA2A3sylIrWet8s
TLSH
T1571533EBAB27C5B37FF57CAD1C5D02545B63001D10BF287221714B5BAAAC79AB4B3818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 21KB
SHA256 1dd2574255aca661ac921813b702de55395669be7a18348647dcd36542b4063c
MD5 a649772bf21808c8c507461e94f3b7e8
SHA1 2fe5cb401fd22d5c29b1557556dac54cd69980af
SHA512 d3f59d9757f2aa1ca92151520683c14f8976239be27e7a9c15cd7446690299023c6d792d119ff23f707c31a4bad4c5ac4a34dce9fd3353b69935e65026f87ebb
SSDEEP 384:kw9/6ZkbuAz38w6gtwVLkMhLLk3mHHuFOkQzXQRNUNwmPvjxwXKJpKeV9SYMQlTL:ko/6Zk6A5twVQMhHk3mHHTjaUNwmHjyG
TLSH
T1DBA2E15F0F5210539C37120E1B0E40F63FE0DAD975A7C1A8E8F298A71D9E7EA6D980A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000027

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
Size 24KB
SHA256 e867e7942781b0857bd95b267be459ac7d0be7df1bf04743ab885e68187ab55b
MD5 d63c2b0239f2fc72ec1db553a32a0660
SHA1 e5632bc115256b03eded927d30db2977354e2c19
SHA512 0955802ae5c2a05066279bbd496066bd2d5e056a2db8d3599c25e6dc0bed65d65bce9d7eda0fc8694f90d3533b73adab4d35e2279b9865de12a5a41cf1989ef5
SSDEEP 768:7Bs7KRmu24OS2DTpHEJB5KTYL/ul3po0p0dC/12C:NBJj52DTpHEJGcL2l3po0p0dC/0C
TLSH
T154B2E1D324A8D3A7E5500626209AC49B35B749E9D6019CFE427361216EC7A284FF2CEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 30KB
SHA256 f4a93cf3834c5f3bbbab2ba619425fb1415050a847f5bc12cd6b0bab5e68074e
MD5 ca6e0dcaf6fe11e3b4d4d299ecbab7a6
SHA1 a637b13aff3baacc733eb221226c36b71a3d3a7b
SHA512 fa037f9ac77644d641bb6cd1b18722be3cd7d039738f8770d6a09cf7e5829b1602a772ab643ce8cd683a0d11e62c5ccabbd555fff25f77c39034793510543ed9
SSDEEP 768:6cTk8CBQtB21Xhcdn9rnKQlFCw4jiQAlMIOVh34HcD:TjCGmhcdn9rKkFxcnALHS
TLSH
T129D2F1819E540000A3E255A639CC5EF4F6929719B31F2EDF523879F108E747BA6B6C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 191KB
SHA256 81a4b7b3f6b98f1c5c2dd522fd05e8e146c64271082d6c3c096e15279a86a022
MD5 4c7e2e409b68e1bbe813d8083724935f
SHA1 6ef3ea0a7977b705bc981d038a04079c3ce92943
SHA512 f3c0608090d166a7d1011e405df6c8435085ae996420320ca65a403be78b943a9a105c2a26554e8d40478450899966a1b472c85d518d05bb185dad0011bc2de1
SSDEEP 3072:CaPp7GuIjVqGUTG0dIdYpTm4xmlvkFV2Q1ubcUOzRS4IPQ0JaoEHdRX4rZn8tjl+:95i3UTG0dDTClRaubcDTKQ2KHin8tQ
TLSH
T1F114121BC2C9F9BB9DA0AAA159E6BC73281D8C43C5904D417C6D44181FF5B84EEBBE43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
Size 76KB
SHA256 9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537
MD5 d824df7eb2e268626a2dd9a6a741ac4e
SHA1 0ccb2c814a7e4ca12c4778821633809cb0361eaa
SHA512 a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865
SSDEEP 1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a
TLSH
T1C97312ABA6CD77AC88DD14565F0043533AFDFB35AB27864349ECA2E01A300677B5712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
Size 183KB
SHA256 2d5b3b4d21f9d4625f01e04896d17bde5c1f6bf5b3d5d6c485b985909af3c243
MD5 b81dabc0bc6ca52fce921e3a928d5e0f
SHA1 9b23a6f37a4ad25072690154329735e76ee87827
SHA512 2fb5ce677d71e2784b4b073351449663f4c7ff971978fedb0c7b4affde1b104644e3e37a8e5c5cfb7d9c8009b6eeb672ad22ab17d4126253ce1e24d7e91d3961
SSDEEP 1536:QFdKjJKFlr3QG+qqoT0yQi6YTwy9UdWtowYXSKtjQbz0:+smrgNbm0yQtowFSqsv0
TLSH
T19404E1AAE734813374CC665974A35A1B80501C3B769ACC1C88E7F56F8347F326E72DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37c1d8e302afd95e_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\37c1d8e302afd95e_0
Size 281B
SHA256 5c9c651585f407915c7c3e27365ac7233da9d93e3ceea4ed69f3fdbe6b62a015
MD5 7d33ba9b801c338e6b250519e301a303
SHA1 ca542cab4f36ab0f409d1ee4fc0f3df94b2dac1a
SHA512 5d745dee848d81e6c360d58daa1d848b32461d04a6472d369b036661e61f3a3c9cd4182e5fcbd6842d0d84cc1cec44f81d27b7fe9d96d5a7b2b9d4ca0dd34838
TLSH
T189D02B57E6480A51C54614BCFBFF2756ABA120AE4D8CE1E451843595192041730AE096
MD5 SHA1 SHA512 TLSH

Submit Download

3a55db790bd9c08b_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3a55db790bd9c08b_0
Size 305B
SHA256 9bc2155517563802a9901dbbc26501ebe598c833f7aa34bda7baae23f9976824
MD5 be359b22abae4d8d786e83fdb67a4f00
SHA1 3d21efe803b09bdc01b81b6fcb06427ad24fff16
SHA512 3de26d1436d974b69074963d9231e5c3cbedb822d6e9a5e4545bd894483ec07dcb5907304ba0f8330faf8b6516b1cd043de817b9d03801fd3a0625d307ee1dc2
TLSH
T179E0E7D7B2441104F516CAF48551611E753F50B649CC42D5004154C246503A01CD4345
MD5 SHA1 SHA512 TLSH

Submit Download

5369b131bf1a2a4e_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5369b131bf1a2a4e_0
Size 255B
SHA256 1ae7cae2b9f8f8012bbd54ca5d0d1b86938401e2fe20274b6e9d43843336e2f7
MD5 862bd1e2ee746d5645a5d9943ae31bd9
SHA1 ee4db3395868c5a72a9ba1f23fc9e55c547b84ad
SHA512 53472a104db61f9a34fd9b49fca05e42c221d86d2727b9d872a60b25b45ac56f79444be2c27f8f4f441f21a567e481db58f8d93cd8ef2717268c49432ae9c40a
TLSH
T122D097E7724C2980ED3902BAFF2731404631AA387B089245500364A79C38C72A880086
MD5 SHA1 SHA512 TLSH

Submit Download

88052ddbed7681aa_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\88052ddbed7681aa_0
Size 744B
SHA256 d5f42a1ea2e2201c4477203b46b232f144d52e57e27d650e66520550a13d6a04
MD5 5e7d557e18f0d5916ca7cf76e2055f12
SHA1 cdb17665fd8edd746c38f40105eb5f3b300c98f1
SHA512 c1c901e1dea9784a57ecca654c7d6ab2fd15947664431b1402d2cca4da819944c77763a09a2c521f7e8a7a3991904ed89cdfe6e91872d34728ac497eb0afa9c4
TLSH
T18601DD67E7C04A01DD3113FDE6E38B99722581199B87C30680617B3A2C1B6FBA92F047
MD5 SHA1 SHA512 TLSH

Submit Download

9b0e58b4e1f08ecf_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9b0e58b4e1f08ecf_0
Size 23KB
SHA256 9b2ece97e20e578a09d17e99e38422e8a4f28d985cc55484990f32ccd2db6c8e
MD5 fc9f10c9ce2ed8aac9b29470967bc55e
SHA1 48212048127821a087c45386182180c8e8314dfc
SHA512 6c0e3acf0fe61fed65882ed64750e6d25ef5bb7b031fefea9e72f5b7698f3340c8c33867b3695e5b3d229ec8b5b314fcacc3be1b803433c09e135a664a42baa2
SSDEEP 384:6fDK/LX5s22DCeuvAkvqK8u2QWSseTPv8U8Zw9QNSK+FogrwLTQDWt6HUtx3:6bK/rW22LmAYDTIwMU6cK+CYSs
TLSH
T108B26F62BB800DA1CA379FF00256CA6B233244443EC7D32BB5A9E6383C0D6E55F955DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3036e69b6e52513_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c3036e69b6e52513_0
Size 58KB
SHA256 9847ecfc2da416b4f41879924d90c8f57db5ce01609548a6f1970e192aac95c7
MD5 00ee3d057623508d8385c99131d156d5
SHA1 3c038af8c58032b5b1c5772c31195bedfaeed4e5
SHA512 186d558f8ba7682613ab3ed784ca08cce2206b24448f57651ea7ffd72e17b60a5ccc1c27c19f06e2b1ff79d76c3b41d86fa38f9650735e2820d2ba2c60796763
SSDEEP 1536:m9piLa/P3a/9/g/DX83VenQ+jKkKK3ctjv1:H2PK9/g4Fendi1
TLSH
T1F14318CFB1D2A331D9F361F141AB860A627EA5151D44185FBC4AE7F49F70887502BF2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb5fb79c7849b573_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eb5fb79c7849b573_0
Size 129KB
SHA256 045c69ca087fd8ce752d05749b96c3f47ef4a05d37d4a9d08d2b798fc360480a
MD5 f195f64958a07a4c768d664759586e36
SHA1 79efca59d0b4d3a54c9323dc390875f192aab575
SHA512 4a936ad830670bcee6f2aa045908d2fb72208788ed8804bfb9420ff707d9375e2d706b7e2bd70ce5877a49f3b01ee9bf8a4b1da2cf6af389849f756a22f3e037
SSDEEP 1536:bT7rqTUol7ruHqpWQHutEVYqhcwQDG38C0oJBfJpEzFxU1U3Ev4luPSl6/Xk:b/2Tn7CKpPOoNp8GMPoXBenKGl6/k
TLSH
T1B5D309252F609CA5CE3247F581738817763684487FC3D31FA6B8A7362C5C6E91ED688B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 4b9f999fa162c5529cc8bee31c7c9cf088917d28f96a872c162d8394b5023176
MD5 513b8102465860900c44584969b80017
SHA1 4ed28562b2503fe2f419d4b6018411ac720cd2e5
SHA512 b9435a50dd77d3c517fde95003063b990406c821aa7128e735ab9403f42c46f4681e2a820fdcf4142e3ba96a36c5b5f2457b2c71e1191f4e944afadd51aaf240
TLSH
T1EB21CC112CA5C962EF244D7D50E3AA1265FA2B764D53477BF4C6577C01A33D8B43B28C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 292bb922113c4118d8139990d2837b1ffe6f5b6510801f23a8378a8eaa386ab8
MD5 6c484366937a90c9f0d2b8aa189b42b3
SHA1 672f8c552097ea8018768c38f9651c2659704337
SHA512 fd2f0df8036bb545c9adde49dff940991fe3ac0813746e35d3bcb3b1e3337b89c725f523fcaf74ee765736e4e2fb150e94f19d64e7e46bb15549e7aa6a43451c
TLSH
T1DE21AB106CB5C822EB246E7951D78A01653B1F754D534BBBF4CA527801723D8F02B68C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 9d90d95194e37db5e7d724b57826610843e45ec285f368a72a14be79c384f7fa
MD5 a819426a273faf05bd1f1871a18c6b0d
SHA1 a25e7ea4190c326aaebb16534f62ba033a4d8310
SHA512 f9eec5effc777860130eccdfbaec71b9ab0fcb3bfb65b7470b3efd07b7b57dce3fd16c34152282ca3295271f436a3128e82dc0f5d3a3c0c02a140df4ac07e584
TLSH
T1DE21EF102DB4C841EF640E7D01DBCA01763A2B599EA7870BF0CA923C01333E4B09B28C
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 88e00d1720bbad36a3ae13d70a010d6cd848a6e51aea9f679fc00b3637915dce
MD5 d120539735ea692b2e04b3b33c996cd0
SHA1 f22f8d5ea6bbecca1ebd7625d0269a9cf2528c98
SHA512 2643d00736091c43990dd394be258fdf9ea4b6a01524a143b077a1cb09175d97cc5cb549110bd7b5b6db293b5cbb0f9701a797cdaf27b9c0ce9efe39fe066fdb
SSDEEP 384:DuQcxLbMSJYJaiELI8kKwfWaIaEg7VyQ9l7EVZJikqmyhOrkHrq0VurDUJTFL373:8WagJvTA3P5EXqk6aw+
TLSH
T1CA42AEF7C3E5866DC85252F1EA143E2ECE2D0928431C3D5AC9D5AF4BA3E28B1D25154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 650aaa0248223f3ae85213544d29464888da9b4003cf9c2866e5293db7602f74
MD5 5ea817cbccb52e4f5abe96e9717ea089
SHA1 a7970cd27a3d6889a24a27ec078e7a834d7be889
SHA512 fe34e8546467eca329b894e6edd280fe9026e0ae0ab121432b3afd2500285790a83aed2126d25f7b61b9909d42571ad48a5923da563a55d6c16193dcfd61f3d1
SSDEEP 192:DuQQJxLbAJSJYJaiELI8kKwDaIaEg7VyQ9l7EVZJikSdmP6hOkqkHrq00EjqrDPM:DuQcxLbMSJYJaiELI8kKwDaIaEg7VyQD
TLSH
T1EA32AEF7C3E5866DC85252F1A6143E2ECE2D0928431C3E5AC9D5AF4BA3E28B1D25154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 6929cb1da850bbb8833cb5bab3d29891c8fee7d7da2ab46c0e46d2ac28cc5e0c
MD5 6e88e9f073f7c3f41ba685f7eba56925
SHA1 5fbceb5430757f55de6868b8125594fa5740c902
SHA512 e70895093fbe10da2c555100c5c1f2088d1520bb2d640025f7f3ebc2257908cc68c4115b339cc81a281dd570299e8e3a768c48d35bfa0104d5ec5b2edea3a851
SSDEEP 384:DuQcxLbMSJYJaiELI8kKwf+sZgI0aIaEg7VyQ9l7EVlkChsGlErSOrIzRt/m6xDb:8Wag5VvTA4buiwPhRmC
TLSH
T1EE52AEF7C2E5866DC85252F1EA143E2ECF2E0928431C3D5AC9D5AF4BA3E28B1D25154E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 78549fe3063d6d703c71d37048a599581df75ffbeaacd1893787c7243f57bbec
MD5 b77822535df81808ad542ef0f5cefd68
SHA1 65fa46e9b23d38df6e5316e4681051d9f8fa718d
SHA512 7ad82cff5a871355b4447ffff2d66b7810d09aed71765979cd071ab8d4d1a15be11b9cf89e56b18233cf3a5028e3d1423bdb309b6859e329f9f7ab68c731f9c8
SSDEEP 192:NR0z6uBoJ35Kv7dp5PRptsjUCj2l9ZHsb+WN38FJwlVo0AWO+EOHL9ZgC48yIsnv:NRA6uBEGp3XBHwP5AWEsXLE
TLSH
T14D62B75EE924297B5CD6D229F951FB27E7F9102161902E98E7FCCA1C14E7ACD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 791ac184478ad4e07b467cf28a6abd729792b7e957c0abd38ecf2700451ca0c5
MD5 04ce408d36684290a7b635507fbef792
SHA1 f06dc7b07d01f6442fd103e504f542e39ed3d083
SHA512 e20ae2e2136576617a4dec31c5387c3f62085bbf862937a8f2fd39a88603233197edcaced495f4d11850a104cac38d5ac06dd320398516d5ee9f41fe9fc38368
SSDEEP 192:NR0z9uBoJ3x4v7dpAPRp2sjl9ZHsb+WNnwlVqpb2EHL9ZqC4VyIsnAUge:NRA9uBokpUXTHwCi2mJce
TLSH
T1EE42A52EF914693B5CDAD229F961BB27E6F9102121942E98D7FCCA1C14E7DCD322301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7adec9108376ad11a3af32bb1def6d1ea7ed6305c2a2ab9fea6f92a6ab970bc7
MD5 7fa1d2d0a5fcd1dd77277570609f3926
SHA1 f15c2bb6a6c05af0a88fbb257f2190eb36e28d2c
SHA512 004bb4ed185675fe21dedb6efb2f521d71309b315d70f62ca51ef9a3dd2901f270a364051d25bf3f65a176c1940dcea970ca86450817c38c50e4c8a0a2e33d74
SSDEEP 192:NR0zXuBoJ351v7dp5PRptsjUCj2l9ZHsb+WNHIfswlVo0AWZOufHL9ZgC48yIsnv:NRAXuBEFp3XBHwU5ARufXLE
TLSH
T18662B75EF964297B5CE6D229F951BB1BE7F9102161902E88E7FCCA1C14E7ACD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1ff21fb397b93109cb38d87408b2b7a1904327d12df99903b3edfb4b98c82aec
MD5 2ad45b61edda42da7f1078dedac01e78
SHA1 4d1924f69a6f6986c69e63dea5c1615733bd05ec
SHA512 dd248049b9d18d4b5761fad158ca008411f5368799fc0aa520e818bd3eb558b8464af60b2a12224bd372aa49ee618cfc65c81d36784f1b832d223fd933df26b9
SSDEEP 192:NR0ztuBoJ3kdv7dp5PRptsQxUCj2l9ZHsb+WN38FJwlVVp4j5loHHL9ZgC48yIsv:NRAtuBZdp3XsHwPaPonXLE
TLSH
T1C962A75EE924297B9CD6D225F951BB27E6F9202161D02E98E7FCCA1C14E7ACD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 83ca58ac74b5c8e24538a4f365065d8ca217951113e244010aff26493f7821d2
MD5 387ed20bb4b648cc5b53cb750e2e31ba
SHA1 0fa200f5e3da6e2085bbe195da9b4a0e68ba8c4b
SHA512 b9bcce7e580f455b546baeb18976cb9e065976beefeae949320fe88ddbc2a32429ecf043b0b2890b7047446069b9b5873ebfe34d07e49c4e4857fb148b48e16b
SSDEEP 192:NR0z6uBoJ3kKv7dp5PRptsQxUCj2l9ZHsb+WN38FJwlVo0AWO+EOHL9ZgC48yIsv:NRA6uBZGp3XsHwP5AWEsXLE
TLSH
T1F462B75EE924297B5CD6D229F951FB27E7F9102161902E98E7FCCA1C14E7ACD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5a41ef71fd8a35af3b5dcb4deacab958ade39d7b3e30c6a2e811a1e07356a75a
MD5 96210487805f30a23a25669f6eefa7a2
SHA1 acfb1f44741a65ebdef2895885774ad513b8919b
SHA512 673148eeb4f146b8e64159d56afd3487b3800e0a416df024a0af143ecc7ce6106500d412363931db78a4056f9e3d936c08aaf0d58151e081931a6d8f10fdbe08
SSDEEP 192:NR0z6uBoJ3kdv7dp5PRptsQxUCj2l9ZHsb+WN38FJwlVVp4jGe8YHL9ZgC48yIsv:NRA6uBZdp3XsHwPar8KXLE
TLSH
T17D62B75EE924297B9CD6D229F951BB27E7F9202161D02E98E7FCCA1C14D7ACD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8bbe17cfe62186ba8cc73fac0debcc5c73f030d75d1ae78ac149b4dd7759d1b9
MD5 4925ee97c07da1d117b861cdb47a69f3
SHA1 4e075c09d3eadc7c9465ffe032fc924dfa317b59
SHA512 a69cc97a30be48a317a29cc1b6581f5ab79ab698db17e18b8912d025f33a16792675719c334a712557489a04550e2821ce7b861dc987918ce79a85b5fabd757b
SSDEEP 192:NR0z9uBoJ3k4v7dpAPRp2sQxUCj2l9ZHsb+WN1jtEwlVVp4eZHL9Z0C48yIsnAU3:NRA9uBZkpUXHHwlaeljLE
TLSH
T19552A55EE924697B5CE6D229F911BB27E7F9102161802E98E7FCCA1C15D7ACD321301B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 815f7cf2441d8bbd1e771118781b4364aae22d7489793b4db97b9f0119d089e3
MD5 6c2a084e9725415d6e6f241570b51988
SHA1 f7e51421dd3914c45e248d5cfdbcc1ccdd7b1907
SHA512 0f2edbb6a76239ee35ba77bd8dd350b86c055aaafae69ff2d50a4140d561c818f0c11904a51a61bac41705a0c50d69925327d1db674cd222f87fa3c49aced588
SSDEEP 384:ZXjVs7KxkXqKf/pUZNCgVLH2Hfgslps7pLuLcifzOXODV0+ErU3O2HG4YpPlG/:ZzVs7KxkXqKf/pUZNCgVLH2HfgsPs7p4
TLSH
T1D772F9676C4C9A770F94CACCD81A7B4FADB5024B65D9886483FA9C2A03D5ECF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b33886edb5b2c06819c738e9088d4b09a5bb268c9027e3a6af17d568cb05fc62
MD5 88a9f16db94a3f2dbfeb530de36fd172
SHA1 86c85d860954047d3be074c0b21ee37436fc1939
SHA512 21a42ad0eabc87d35d84a8969fad7fc68701237d4dfd2221d88b553039686ea7885c4d056ce2bcf196b9502b04e3a5c573077c499fa8872a09bf6dc7884d265a
TLSH
T165B01250C842D512C45302F5119E448C33549F20E705130153E46973983E2E04128354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587b55.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587b55.TMP
Size 96B
SHA256 40914c9170912ddc2e8939a9d2647e2d4adb434ec760dff321fe6b11bf2b97ee
MD5 a091fcd03347f807f30cbdfe191eb7e2
SHA1 856144f9baca10070e01da1618107ae83e4b197a
SHA512 ac90549c3f716ce4fbe40b2dcae1c3cb2fc025ebed523f108b44e79620fcab3af73cf414bbbbeefdc27e3b72257eab61ffe765d62728c5a3a9e66e73a6508e2d
TLSH
T1CFB02200C022E203C00203B028C3C0C83030CFA0C303030282F00A2AEC30AE08A20228
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 b77753e06f5540568f4fe78ec3c3ca3dbd421eee6b274acbb36823dfd62a45f7
MD5 14c2fa27fd2232a5cde70c7666b8c8da
SHA1 eb220b0e31cbe0709f89be532c120ebc41e8ae9e
SHA512 f9b439bbed26a2d185467aca1f9d357435caf34900aaf759ad94eb1e1ec8a0222247f2877879d14dcbd1e163e7d55cbc50b78b21438b24965944223fdb200cdf
SSDEEP 1536:wTP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:q++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1B19302BD991F7C7953ABD696A0079CAC8CD3CCCE1514157C31CB6B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 9f2277c6e308e60775d962e40464d1d9e6c46c72d5259df218d618f5321645a7
MD5 38b14445854c56e3c19f55d2f1587b86
SHA1 571fcb848dc05096aa15db1f5ecf2ac7eb3577ef
SHA512 8c52f01ed89093a469c9deb77864c3a6cdde2a3fabe9ae63925364cf9b759563695bfa35227b785337101c3d97ad9d2aaa94efdf776f800cb38dd35175e8cf24
SSDEEP 1536:odP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:Y++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1499302BDA91F7C7953ABD696A0079CAC8CE3CCCE1514157C31C76B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 79aadf6ad72b5d8f14acda25f27f984822f4f068d565c11062787fa43b574601
MD5 725f14e246667de50339cdd65946bb54
SHA1 0ea00ca1b95ff7b4b1d0e6f6eef427f4021172fb
SHA512 6babc86a42f8f4fb8db868c54b34c3308064914dfebb12592962a2f47d8a8404a08c9fca6a67083b39fdbc28fb660ebae3712545eac3b9e4dbd95cf4d8937579
SSDEEP 1536:oQP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:f++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1279302BDA91F7C7953ABD696A0079CAC8CE3CCCE1514157C31C76B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 a7597036cf493b594b41dd7303da726c662ddefb45bdfa7aeabf22c87b8fb7fd
MD5 99786ab7b95315ba511204e183306c14
SHA1 73f64e2cbe06373f7d391b23d737d209182aa25f
SHA512 f2c807b0798c3c18596e2a9e709bb00c7b98a20e190eb5df45cc3df2b47f4726ed72b8bb355cb43e207dc66eef15d499d2f598d66640196329982ba7098b7de0
SSDEEP 1536:VHxmqP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:7V++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1C29312BDAD0E7C79235BD6A6A0079CAC8CD3DCCE1614157C31C76F0E14EA392A35B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 57f9bb876fda0e26d02f73475b83239742fc48aa03e7e0e77316e25b66c75c0b
MD5 47937e2021e05842a6a7e76478c0ff59
SHA1 8fadf7723ffbfba76874bf920c1ada1581067dcb
SHA512 2588ca6c93e55abd8d1815125d5a8b43ffe1c590c689c7e3349f074f9c0a736ace812202ca45b11d7c12a80f2bd6066ab1d235bf143c5f7511df46e4cbf21f71
SSDEEP 1536:oZP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:k++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T10A9302BDA91F7C7953ABD696A0079CAC8CE3CCCE1514157C31C76B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 1824a019a2f742cf2da138b948699e078c9f32590313ec7c17e781234342dbd0
MD5 843e5ccc8c44f85500018651b4c99785
SHA1 8c7ae4b7ee31e58a05f4ebd4e393633b0ecbbe9f
SHA512 514e78bec798807845a9a5bd4f6a6348c22b81df13407b8642a52ba7735d335d003c1be3e6d5e173ff1720fcd38e67284cd35a2e4b5e0530032a011c8ef29bf9
SSDEEP 1536:wZP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:0++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1969302BD991F7C7953ABD696A0079CAC8CD3CCCE1514157C31CB6B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 4694497a0d6e575d0de2234855b1776c060d193f6ce9033e7e2e1d92b4399358
MD5 07a852768b0d244ce89df4d87a9bf822
SHA1 4c54c08239a5825639a1492ca20b6dd702e1ed3c
SHA512 6ee9069df6ac7703873f1f1b90ec1cb5170e9ee308957717b45919ad8202dd30b58b64b06d9896b897a05d24d877005283d0e783c55f286e4c9f05c180eec65e
SSDEEP 1536:obP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:6++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1A99302BDA91F7C7953ABD696A1079CAC8CE3CCCE1514117C31C76B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 1e7d116c36391ccbe928f9e1195f67a50edb9938f65e3ffcbda706d6845ecb43
MD5 1ba4141a632ede1efc99fef0a5a93f8d
SHA1 d4a1cf610ace9714f2fbf9b9857ec06a56d010b6
SHA512 1d3de9918b0959978f9a5ba4fdbfed9e1b4d3292d12fb01964916f38008d8f602ecd4bfcbd1e5f4866f775b942903add93842bc0dfbfdc3ed5f83bcebc4d045b
SSDEEP 1536:wHP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:2++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1F79302BDA91F7C7953ABD696A0079CAC8CD3CCCE1514157C31CB6B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 dd8df3d61927dd3e907411ad319cac9ba46f3b76c825210f35036e876d202106
MD5 702b084cbed0b0b3aaec680b137694b0
SHA1 677b68ab032a1040218e188b49a3316703834d60
SHA512 e095693df365d3b341e168123f13ae8acaa551f3dab6e99997607ef23eae0621ccbc6bc3c6158aa901cc88432efc5e137f97477312bdda338381cf0e1f481f37
SSDEEP 1536:XxP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:J++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1EF9302BDA91E7C79536BC696A0079DAC8CD3DCCD111451BC31C76B0E14BA3A3A31B8E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 e9c09f7252c48b947db4cf9133bd5ac871890bd138574555c97b13f385df7856
MD5 3174d0ae0f428ff9edfac6b23420e591
SHA1 5a37d67e3b4f9dde1d42dcf63d70cb396e43b320
SHA512 310a781cc72c7323e5348cfe10b8295d06373539b03446ef80ca7ee436fa10d08e98f87c55a3026067561ded428aa2ab6bdc23a582954b5b802658599799e0db
SSDEEP 1536:orxmqP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:oV++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1C09312BDAD0E7C75235BD6A6A0079CAC8CD3DCCE1614157C31C76F0E14AA392A35B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 d128bd8b174de089acc13f3bf2475003ac934f9b917c58e413ba6255508dab7e
MD5 cd883bb3aed70db976dff523dcc950c3
SHA1 d52735bf5c2814e26d89d1fb6dd6fe1dcbab7ac8
SHA512 f715c76930bb6d2bc7f07e14877db08764c6d32cbf3eaa7083edc9aeac69b5984621f8dc7c27810438a9007604c0aa308a753b8791023ad754a2dc548695d232
SSDEEP 1536:oHxmqP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:IV++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1B39312BDAD0E7C75235BD6A6A0079CAC8CD3DCCE1614157C31C76F0E14EA392A35B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 b113fac5417fa4e01349fea6f4271a55d87cdd03b8cc83170ef3d2ff015a157d
MD5 14161a090aa1b6f865432572024124e9
SHA1 8ccd920f07e76eb97585bd5ca715b3cbc1405a2e
SHA512 75d41f357722e19a7dff5783b98df5aeb5f7e7b28a806d9bafa5d9f38a677e345e6c27a43a90972a4275ba9e961e8a555a602f8203748a2d4bac21051327d8a9
SSDEEP 1536:oUP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:b++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T19A9302BDA91F7C7953ABD696A0079CAC8CE3CCCE1514117C31C76B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 539ab47bddf593fe3fafbb513a96c17aa04517341a5250849873dd514d569416
MD5 746c3f7c4b61e6613014fa96c327e18c
SHA1 d5c5a2a5e01df943974768bb13830ddc7713b1be
SHA512 14ed5506a03aadf9cfac6e3018d466e3881a46f3c3049e89a2956fe9bb3550ac700229e312586198365229b286523adebc1f6c726520be63f6b606ac09cb74bb
SSDEEP 1536:oDP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:q++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1169302BDA91F7C7953ABD696A0079CAC8CE3CCCE1514117C31C76B0D14BA3A2A31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 0a162e4dc09adee6b9e1eae92d9e58001e0f7fe9b08d69afd4711606e98cc7d5
MD5 cb8808e33342547bda20deec3cff7c8a
SHA1 83223655bf1b06ae25bb77eb2046560d679d05a2
SHA512 06ac551a355c6f4be2a05596771e2425046d4a79c4772c5f7fc8ce8e734e4f0088bcfec11b2e40bc544c9bdf5252e48f189c7beeacbe02426ba2cdb272b3446a
SSDEEP 1536:ohxmqP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNc:qV++J3qUQm08KMWF0bFTcVHr6zb
TLSH
T1439312BDAD0E7C75235BD6A6A0079CAC8CD3DCCE1614157C31C76F0E14AA392A35B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 8KB
SHA256 76fcaebe3c9f84b8c862eff042ce1a0a9ac7abbb2212306f468a8e4cd61bdbfa
MD5 714fdb371fb1aa544373e5570ea248ad
SHA1 64d1deb6deeb47f046765111a5ea600956e499a5
SHA512 e37ac79d2a8699a751915f6182439b4e546f7c891bbe627a47c75198fa77ef8a9abca33af06194607eae4f4ff57cdf5afd3fcfc8191db113d096d24add4ad217
SSDEEP 96:d0M5YT4ZFA4w0MsOVQtQ0MQyVQtN0M/E0Lg9/:GM5YsjJMyMFMNLs
TLSH
T1C902E089BBFA5619F3F38A757EB23B115F7EF81257089D0D5180830908B1A109DADB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 7KB
SHA256 e460485d475e33de36f722a7fcb0918be22484fe9f4fde50c738bcefb1904b62
MD5 05395c5ac684278200afe8243bf4b734
SHA1 d18a3c67bd3fd8564e1f05e0da21f9f5713a5162
SHA512 d959c53212a18ef7a2762065e80590ba0f3e9a646f5aad8398aff61bc2d6ffddde467eb23d10a137a9809187b38d0d65ea53e27e0bde2c29346e2f2a3ee7e5da
SSDEEP 48:dHd/bARjJvYvKVQtt+Hd/bARjJvYvKVQtt+Hd/bARjJLYvKVQmkzHd/bARjJ6dAd:dmQyVQtQmQyVQtQmUyVQ1m/EZg9/
TLSH
T16DF1C089BFFA1619F2F38A36AEB23B115F7FF80646095D0D5180830909B19505AEDB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 7KB
SHA256 9975340de2a3b674160f8af931202af84ce7d40d29fe67bb74ed56bf964c0b7a
MD5 a7a7220f5ba6d062b102223a6cc2aad1
SHA1 522159dea4cac472b67822de41abc769a0d7de57
SHA512 85231cb139e26ee219c612b75f697e263e46816388554a9cd15a06ebcb09eb651871b201397f56b02739d8a68902a63ea3240ba3d876f328aa20ec121881aef3
SSDEEP 96:d0MsOVQtQ0MQyVQtQ0MQyVQtN0M/E0Lg9/:GMyMSMFMNLs
TLSH
T12BF1C089BBF65619F2F38A366EB23B115F7FF80647095D0D5180830909B1A505DEDB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 6KB
SHA256 d77331cc9538c61d55ff73cd936d14ce4c87d90475840db4b2efe3688119c4d4
MD5 5811eaffdd5aa736c2975624e1c7c76c
SHA1 95257ebc64a6db4d7fda8fc32932666dbc2fa39f
SHA512 f11aff599656a7df049f247163d1a3ea58b1d5ad174ae0c4f73611d8c0cf49e0c0e607e0cc8bf882becdbd71160fd3b47b8754f453b5b513e27ab9a02c3761cf
SSDEEP 48:W8d/5ARjJvYvKVQtt+8d/bARjJLYvKVQmkz8d/bARjJ6dAKR+/KRQp+hd/bARjJs:WRQyVQtQ7UyVQ17/E8g9/
TLSH
T19ED1AF89BBFA161DF2F386766EB23B215F7FF8064709590D5181834908B1A1069EDB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 385406.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 385406.crdownload
Size 3.9MB
SHA256 c677068ba0de52e7cc01f74dec0fee89ddee054603b3cfc2b9752900c60b4bd8
MD5 2c8c04cca704a926ff6a4356b47a851a
SHA1 5ae4d0c6f3afd96b94f261c6dacd2f3e2faeb431
SHA512 5c144f398385aed934b19934c19b04a3ba20fe4e2876b4a713623aa40de03d07b2bfd840615f83fcd12122015830fc4e0faf46bfe6d37e0e7eeefa62cb8910e1
SSDEEP 98304:yATduwxO7zxHFNEZB3rpFqhiRXYdRIlOSolM2muOLimcKEzlH:V/xGzxjEP3rpF6iRXlODMKH
TLSH
T111163310BAC19479F7A720300E7CF7A996BEF1791F27568777940A4E8E302C21A75F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 789284.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 789284.crdownload
Size 3.9MB
SHA256 4dd54cd46faa1b635fe29d4232cec783f97910e7892f4a2bc67b8cdf67a99d70
MD5 50997bf81f674244f83e46ed12ae88e0
SHA1 01f4a0735e51830fe424a4a4a145c3d50aeb09be
SHA512 2160d87f46a60723b2ac4349b8ec3e5a0382603aa926011731fa47054b47a0cea2256a909aca7e3338b91c8696228792bc147fb3a579dfc633ba1396d0613b50
SSDEEP 98304:ZATduwxO7zxHFNEZB3rpFqhiRXYdRIlOSolM2muOLimcKEzlU:i/xGzxjEP3rpF6iRXlODMKU
TLSH
T159163310BAC19479F7A720300E7CF7A996BEF1791F27568777940A4E8E302C21A75F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2276-555-0x000001CDABB30000-0x000001CDABBCE000-memory.dmp

Download

memory/2276-200-0x000001CDABB30000-0x000001CDABBCE000-memory.dmp

Download