e8fa7240c26a9f195d235cbcf260589b184f9437fae6d925527b60ee1475832d

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 01:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FPS-Unlocker-fps.zip
Size 1KB
Sample260426-bl765aby3x
SHA256 e8fa7240c26a9f195d235cbcf260589b184f9437fae6d925527b60ee1475832d
MD5 87a7102d25780e161b510b0bf679242f
SHA1 0d6b9995857e41ce078200c96a6d43da048bcb79
SHA512 790bc86e79444dfd42742a254ad654f235a440642e464d7ebff570cf2da7acb57f34eedc6b9d986f106cb5a26b02c9e766c8ecf8a6917716b5299bfb909cf1ea
TLSH
T10831C9D0436F5C54F4EB08726924AA7BE04B94C40B5C8647240B690D245F7A2D561FCD
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4604	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216397570318284"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2122505878-652277452-2375749442-1000\{D8E81645-4B10-4982-B570-1AB42DEE57CD}	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4108 wrote to memory of 1856	4108	chrome.exe	81
PID 4108 wrote to memory of 4128	4108	chrome.exe	82
PID 4108 wrote to memory of 4128	4108	chrome.exe	82
PID 4108 wrote to memory of 4604	4108	chrome.exe	83
PID 4108 wrote to memory of 1264	4108	chrome.exe	84
PID 4108 wrote to memory of 1264	4108	chrome.exe	84
PID 4108 wrote to memory of 1052	4108	chrome.exe	85
PID 4108 wrote to memory of 4972	4108	chrome.exe	86
PID 4108 wrote to memory of 1052	4108	chrome.exe	85
PID 4108 wrote to memory of 4972	4108	chrome.exe	86
PID 4108 wrote to memory of 2708	4108	chrome.exe	88
PID 4108 wrote to memory of 2708	4108	chrome.exe	88
PID 2196 wrote to memory of 2488	2196	chrome.exe	89
PID 4108 wrote to memory of 1312	4108	chrome.exe	92
PID 4108 wrote to memory of 1312	4108	chrome.exe	92
PID 4108 wrote to memory of 1276	4108	chrome.exe	93
PID 4108 wrote to memory of 1548	4108	chrome.exe	95
PID 4108 wrote to memory of 1548	4108	chrome.exe	95
PID 4108 wrote to memory of 4728	4108	chrome.exe	96
PID 4108 wrote to memory of 2772	4108	chrome.exe	97
PID 4108 wrote to memory of 568	4108	chrome.exe	98
PID 4108 wrote to memory of 1496	4108	chrome.exe	99
PID 4108 wrote to memory of 1496	4108	chrome.exe	99
PID 4108 wrote to memory of 2140	4108	chrome.exe	100
PID 4108 wrote to memory of 2140	4108	chrome.exe	100
PID 4108 wrote to memory of 4772	4108	chrome.exe	101
PID 4108 wrote to memory of 4772	4108	chrome.exe	101
PID 4108 wrote to memory of 3832	4108	chrome.exe	102
PID 4108 wrote to memory of 3832	4108	chrome.exe	102
PID 4108 wrote to memory of 4348	4108	chrome.exe	103
PID 4108 wrote to memory of 4348	4108	chrome.exe	103
PID 4108 wrote to memory of 5048	4108	chrome.exe	104
PID 4108 wrote to memory of 5048	4108	chrome.exe	104
PID 4108 wrote to memory of 4692	4108	chrome.exe	105
PID 4108 wrote to memory of 4692	4108	chrome.exe	105
PID 4108 wrote to memory of 2112	4108	chrome.exe	106
PID 4108 wrote to memory of 2112	4108	chrome.exe	106
PID 4108 wrote to memory of 2416	4108	chrome.exe	107
PID 4108 wrote to memory of 1276	4108	chrome.exe	108
PID 4108 wrote to memory of 2416	4108	chrome.exe	107

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\FPS-Unlocker-fps.zip
1⤵
PID:2096

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ffa8706c728,0x7ffa8706c734,0x7ffa8706c740
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,11494094567907110600,6895096747397961852,262144 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2256,i,9988572164097073972,4690470613764121022,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,8853257764605043334,8897266081096955361,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2516 /prefetch:13
  2⤵
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,5012691991224314781,13699406356663215058,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,11561397491577052802,4722587240355382146,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4244,i,7138465593768252624,7093247711916036553,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4252 /prefetch:9
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,15741523665996759227,8945540681494879451,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,2648706907663658217,3522783416256359422,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5308 /prefetch:14
  2⤵
  PID:1276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5752,i,1496315706976603837,4056539530405196582,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,227429003007537380,14045876145466577136,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5708 /prefetch:14
  2⤵
  PID:4728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,12432153876166400342,5315589411023491645,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:2772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5648,i,3488929946307860013,1674598649566383699,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4264,i,2325832149110823789,4077326127759062154,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5836,i,17637990045911836171,9957748356953852188,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5452,i,6130415417456545056,5480225341335742553,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4260,i,10440534532839172445,6663397577863837811,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6000,i,5828403515845130078,12041180919152047467,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5444,i,13308431022517687382,16938894982781873119,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6268,i,15278627401346363616,17815486263542218841,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6384,i,2600775625508087745,12473325568310100824,2097152 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6620,i,15850545484701315224,7770484857390477035,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6644 /prefetch:12
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6604,i,14243215065278985556,17275540123283596063,524288 --field-trial-handle=1968,i,16768211957543203488,4805969412629407787,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6660 /prefetch:14
  2⤵
  - Modifies registry class
  PID:1276

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa8706c728,0x7ffa8706c734,0x7ffa8706c740
  2⤵
  PID:2488

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4772

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 49975b96f11bda430c7e1eec5810f2221f17b571ce12e2e24039f21df054b700
MD5 bd7d2d8a8519b75012d9ac7065027551
SHA1 08a59403d7af6d4ce969664e92f8fc7cd1dd3605
SHA512 eb15474c9a2647aebcf00ec568c1599103ec8254dc3999559662437ee7bc41a02572393634fe522b7ede84ce29842b3e520305d0de12f641134c4bfcd4cdfe98
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 f383b7ec3e2e319dc56f42ebfb66f4d585e86b15562e004879157549ef3f0ef3
MD5 b71b413ac88591582ac12c71f1c695de
SHA1 86ada416f8380e5919c016566da53e2dbfb446a7
SHA512 c1762286ca3c8e9af2560d1a51e1551d48434a1f2e94d90307a1a11ccdc883e8183da46a63a873a8072c469011d886b7e3194a660124d255e3dc32324ed1b5d0
TLSH
T14FE02B9EC9B2DC370AFD4B1890500746E751235F2B60541F3A3DD1088FF1A3B454586C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 fb022001f456f9af4d74502f9dfee1d173c8075e305b74b25baab8ead34e435b
MD5 1345a26ed5f3d0b27dcd11a37e1e0fff
SHA1 61f297ef4bdb8d880869b25740e7d187e86d0410
SHA512 8a5b6f40cdec04a42119b25ab973e91b2e7db8721e12a993ffbbc3cdfad634140aa97e1b8f23e23b2cbc6bda50efa1453d017b4d46557347ee0fb2297c4d7e9a
TLSH
T107415F6A85C7CBF0EF68243757CC5F1931B16D24B63E2F2759D84CA94E473EAB00960A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 58df3396f10330d3f67e9c5cf1aff3a259dc899396e38c96a2b334549365e605
MD5 e904237565a9ac6b4cefcd6359fc7b97
SHA1 da746b73280a873c0c83d1edd3377aaef3549dce
SHA512 5e9ecd7236df92352bdb1b98feaa9603fc29ef2eeff8321d8e6fa16b6c46f5a195438266880ede5a68ace0d35ff4e70c3097f1a51d72e00a865a35ec17adfb5b
SSDEEP 192:DTEIOvxGZkY1s/IaaiTYHJY9heu3nYpI5puqS51j5Ve6PvdKXoU5dpO/lci:DTEIOvxGZkY1s/IaaiTYHJY9hR3nYpIW
TLSH
T12D2289B7D3E8C52DC81152F5AB196E1EDF690914932C3C1AC8D9BF8B93E2871D20068F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 19b9504d31f7d56a8c2ab27a5ed876e99433e5d82c76247cb3de6c15e962a36d
MD5 ce18c7ccf43efa248c5b085dc241ed6d
SHA1 f75dcec015b6f3940fd30bf754f502ca19d12a1e
SHA512 5c4501f66adc9aa1222197b4b40dcdd1d5620f74ef90bc4c828544eb2dd8f5e221e1ac093fcf1df1adb1f357de4b48def07f4bf1ebd28e77f5cbe1c4c0bd4a2b
SSDEEP 192:JRWcBzty0DzfUgIv7vYhHPRpDNktB/98Hsb+WNfduELZ2I+gGuzy2OI1pAVyIsnB:JRWmztZ3UkxXS6wVNpQuW2OIoe
TLSH
T14862FB1EB810697B9CD7C62DF961BB5BD7F1202252A01EC4EBFC8A1C14E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d63176f9299f4ffdfcb90f3eaaddf13f4e3c025b05deddede59ed3ff4ffb987c
MD5 c38356a3175998475c6486509b5836af
SHA1 4601554aae7095307742e45705ba2286c697edf0
SHA512 59ad4d74487415ee75238b6fca947b0e7fb18dc9d5214ab310672d1df7620a32e2916e325cf18c5e9308942a579147139d51913a65a894daebd4c33b6066ba3a
SSDEEP 192:ZRuty0DzfUSfv7HYhAPRp2I98Hsb+WNnErnpy2OI1p+VyIsnAUgtaJ:ZRutZ93E8XT6wcnQ2OIC8
TLSH
T15C42D72EB914797B9CDBC62DF922BB57D7F1202161902E84EBFC8A1C14E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 841b0566c6173f9814ac4ab1b3230d3206edccb4c2a21a8ef6f7787bed94a742
MD5 02b8c80030e897550f740b8dbaa91429
SHA1 842b5bdc9bab1d560565cd1f497152b18d9d880e
SHA512 1d5e6d59a668dbef50c7e51f6343aa019287d493725b71db92a30902231776b5dc6494d6fc0ff3870f96dfb8f329fb98f8634af247803adcfb49ddac29793d23
SSDEEP 192:JRWcBzty0DzfUfIv7vYhHPRpDNkKB/98Hsb+WNfduEL4gGuxy2OI1pAVyIsnAUge:JRWmztZ8UkxXl6wVNuuo2OIoe
TLSH
T1D952DA1EB910697B9CD7C62DF962BB5BD7F1202252A01EC4EBFC8A1C14E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 14939baa37403f16ec9e34285846d2d0adb2c2f677c83fc2679508b0ccfd50b5
MD5 28edb629a7066691fb4b6fc8d2bca9f5
SHA1 ffd19dccae39e32930a524744c8027d59f01319d
SHA512 cc30d72636d3cf987c9ed468a5f02f4f1e9c2c4737faf66821ba435580d0bbbfa20e1a4baba4ed05a7c84f408622dc458ddc4dbdded396b5edc440b288dd386f
SSDEEP 192:ZRWcBzty0DzfUSfv7HYhAPRp2NGO98Hsb+WNnErBro2ky2OI1p+VyIsnAUgtaJ:ZRWmztZ93E8Xa6wcG2r2OIC8
TLSH
T16752E91EB914697B9CDBC21DF922BB5BD7F1202261901E84EBFC8A1C14E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5926e3cbbb18e1580abd35f3abb8f6c72cdba639c3e1a258d67593dae0d3b346
MD5 7e1b8d89ee37a0816bd1ee469ececfa3
SHA1 c041782d8e6b0af31a128866e2198aeb3ca55359
SHA512 9a08df88c76ba384a63887ffbbefcb6092364b49a301ee9950b16a04a883776632045971b3117717f029ed813d023ecd823dbd7912c87be08ed33556803bb155
SSDEEP 192:JRWcBzty0DzfUSfv7HYhAPRp2NGz/98Hsb+WNFfEL4EDeAy2OI1p0VyIsnAUgraJ:JRWmztZ93E8X/6w2zef2OIUe
TLSH
T11252FA1EB914697B9CD7C61DF922BB5BE7F1202261902EC4EBFC8A1C14E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 420a11b875aed514266b552ca3b408798c6c3e106787ce819911f976d540c512
MD5 84c66b47efaed5ee0ba96be8a1206725
SHA1 eafa5bf007c0ea715bc6e311283c7abadd0ee0df
SHA512 1a3a8cb855661e842056389a1531bc1b0be7a87113dec9a566b70adb41172d97e57a4b52e81b7e6ccfdf6dbcff1b79b324a92fb404bac44b4b57e9aa786cb67c
SSDEEP 192:JRWcBzty0DzfUfJv7HYhHPRpDNfB/98Hsb+WNFfEL4yUEPy2OI1pAVyIsnAUgraJ:JRWmztZ8JExX36w2+Eq2OIoe
TLSH
T16952EA1EB914697B9CD7C62DF922BB5BD7F1202261A02E84EBFC8A1C14E76CD2127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bed329eaacecfc6985d01359d692b139e4c0335c613537ce9fd50a27f3e23468
MD5 0550cdde89be120fcfde875e72611d2f
SHA1 a48f6ab170ecb1cffd7d36f5c20abc0a3a219312
SHA512 4a9161ccaa9b58496f2e4e12fa96608f71bf740fb6e261e923cea5c74778575e5c5b7b45d85e0085a0f798e00c6f903e6a148a258d67c9dee0ea66696678882a
SSDEEP 192:JRWcBzty0DzfUfBv7HYhHPRpDNGz/98Hsb+WNFfEL4EDepy2OI1pAVyIsnAUgraJ:JRWmztZ8RExX46w2zeQ2OIoe
TLSH
T1E352E91EB914697B9CD7C61DF922BB5BD7F1203261A02E84EBFC8A1C14E76CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2328ea9073549adab02fe99e0127dcb5999d2517b99cac1f85861fd5d1268867
MD5 40aba898dc4efcd9988ec53e06a8b15c
SHA1 af8b73cd37e29a8d0b68b474702174d179201fac
SHA512 1f184dc588afff9f591e8a55398deb52c19ccb2c739739b1384e2a6da49836e5a8171b750e21fad998d39b550d8f4906b846178327f24be8db946220ec5b5a8f
SSDEEP 384:hTjVw7KxkXqKf/pUZNCgVLH2HfgslXa7pLuLcif3yXODVw+ErU3L5HGcHRXD:hfVw7KxkXqKf/pUZNCgVLH2HfgsVa7pq
TLSH
T1D172FA676C4C9A770F94CACCDD27BF4FADB9024B65E9886443FA981903D5ACB010A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2d405b559713cfe09eed41216cb79622c6cefb8f266d6e67a76ad7a9822590a0
MD5 e808bcaa788539c5675fb0298e8db3a9
SHA1 e9fabf517784a1032fff184d971eac2aa403b5b7
SHA512 712b41d31bddcb3b292add75c4036e6d350327a29ae94de8d9c2b1f047fdcd2a0227b40499df0b90f4900d82fb4c83c7eeecd4df4fccf0c358b98cdfac214565
TLSH
T176B0122090419612C05302B325C3548831645F118F06130193E07AB1DC36DB14134151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dbc5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58dbc5.TMP
Size 96B
SHA256 5f322ef6e22c738017bad5c320759e8cf4410f9166a5178b2ae77c107647d9ca
MD5 a7ce1d63a30ced558f6773d20fa50fb1
SHA1 53b19b9f90c341c0b2fddf36fc63bb27b1af2d58
SHA512 c22734674bdffc2160901a2c41224b9da57d26d745f8936ed7bd54008526dc8d0bf8122f289fe0d698edc8197c1ac651f25176fff9a8c90b94fb30ad0e6d0287
TLSH
T1E6B002A9C112E326C04B13B0799995DC7360DF79C707161296E01E7ADC27AB24566165
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 e464778b8d6c7bf11cc2f0b850bd2545a8aa9ac70eace8fd5d07a5229fd62d79
MD5 530c97930ab765ea7726d1a8503b7e2e
SHA1 876133455aea941fe784a953d6b4c784b8d549eb
SHA512 81b0421276b3953be2e6e57df41ac1bc67c824384587f1fad451ba9febca1af4718e16b99a156c61ced4f82ec24ce0c8605984d0c816778911aed3eca5a00363
SSDEEP 6144:2Rqe7NvoXMZjC+a+lAFqBMQs++JjcMW2VcVL7:2YY8GjC+28MQOOMWV
TLSH
T1561413B6EF296C6E271ADB769023AC5D4CD3CCFF2114681C61D92F0A259C682276F8D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 2aa21a641ca71a4964b34db8e9499b890c36b5f010906b4625d4262550fa517d
MD5 786fd4b6d522d017afea0fc46247380b
SHA1 1921a4a60058b62e57dfb9d3c34f05aff209f2dd
SHA512 e55d9461235e5f110c186d591d8fe52c974f4a6a612002bab136a7c4b092475e707955a37114654eae200f1802eb893d4c8307fd8ed34158e8e96ba56d297b85
SSDEEP 6144:FRqe7NvoXMZjC+a+lAFqBMQs++JjcMW2VcVL7:FYY8GjC+28MQOOMWV
TLSH
T1B71413B7DF282C7A270EDB7A9033B85D4CC3CCFD2114586C51DA2F0A259DB52276A9D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 14321152cdc5251d53c4151be227f4a3febeab5d19b9c2843743320bb55b3e35
MD5 b4a2fcaaf317e582ed172f426ff4bd24
SHA1 8d55028779dd6c07c04bb9d2f71733529391a4fa
SHA512 f0c3ce75ed6f2f9f403181b42a4bec8d3bcd6442a23cf5491b202806869339522c333cfcb0f94098d64054098cf60e4f5f794ff961a693bbbd2a4c4c2d413421
SSDEEP 1536:wSuP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNA:O++J3qUQm08KMWF0bFTcVHr6zf
TLSH
T17B9312B9991E7D79236FC39AA0179CAC89D3DCDE151410BC30C66F1E14BB392A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 9313165aba55732feca43ecfc6f06b4c5506b44e69921ccc33b1771ac28c8b88
MD5 dc591ed3a2e6c270f1e968bede6ce9a1
SHA1 e4f006fce40fe51d4a4898da0d440690f8d9ab63
SHA512 fd86ad936ee4009b68e3c63dcd2847cf335d70dcba8c053a04ba0a031e12a509dadebbfe3ca65498dfca3bce0d8082260ff55740ae95221b46d1b1d5fff2dd8d
SSDEEP 6144:URqe7NvoXMZjC+a+lAFqBMQs++JjcMW2VcVL7:UYY8GjC+28MQOOMWV
TLSH
T1531413B7DF282C7A270EDB7A9033B85D48C3CCFD2114586C51DA2F0E259DB42276A9D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 a684b5b2d773d4232ebea299adcd7782a6677c25a117bc52b31f392c4f56c000
MD5 150fafe5d8abb07406b011189aebe73f
SHA1 4f2a02c1f9f3799ed91f2d02f810661966b887bd
SHA512 3abb35d732981110479a7c5dbdd8b69be0eeec95b5362c3aaff0b7b201fccaf93658088a437d7880edc4074d21c3d4fb7422daa62ceb41687cc3ede1957e3ad7
SSDEEP 6144:iRqe7NvoXMZjC+a+lAFqBMQs++JjcMW2VcVL7:iYY8GjC+28MQOOMWV
TLSH
T1231413B7DF282C7A270EDB7A9033B85D48C3CCFD2114586C51DA2F0E259DB52276A9D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download