af0e5d603fe8517a00157f7c29d1af05b71a13e35555d9cfad5393db8db86a80

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/04/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Unbranded.py
Size 23KB
Sample260426-w3bjpsev4w
SHA256 af0e5d603fe8517a00157f7c29d1af05b71a13e35555d9cfad5393db8db86a80
MD5 f2ef459bea98546207727edcd36de27d
SHA1 aef1c5f9b37d34e93498ee6fe3cb16f2ca693c2a
SHA512 58011f033268a31487721c533a2357d4a41b2b3f0083e102e18178990cb99f7948e3c05bf87e43e34e415aeee84012602d174cd5c14dba310150aa846ae4b094
SSDEEP 384:TZiUfbDfrtsL78zIpPSPU41VVufbPDNPp74O3FYKJt86Y+93rR:TZiUfb7rte78zIpG3sn3qKJt86vr
TLSH
T1DBB2D71584121C96EB03E89D487790429B176C47A94988387EFCD760AFD60B3E2FDFB8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4644	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134217016037902422"	chrome.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4256	chrome.exe
4256	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe
Token: SeShutdownPrivilege	4604	chrome.exe
Token: SeCreatePagefilePrivilege	4604	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe
4604	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1816	OpenWith.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 4604 wrote to memory of 564	4604	chrome.exe	89
PID 4604 wrote to memory of 4816	4604	chrome.exe	90
PID 4604 wrote to memory of 4816	4604	chrome.exe	90
PID 4604 wrote to memory of 4644	4604	chrome.exe	91
PID 4604 wrote to memory of 1652	4604	chrome.exe	93
PID 4604 wrote to memory of 1652	4604	chrome.exe	93
PID 4604 wrote to memory of 5024	4604	chrome.exe	94
PID 4604 wrote to memory of 5024	4604	chrome.exe	94
PID 4604 wrote to memory of 4188	4604	chrome.exe	95
PID 4604 wrote to memory of 4188	4604	chrome.exe	95
PID 4604 wrote to memory of 4876	4604	chrome.exe	96
PID 4604 wrote to memory of 4876	4604	chrome.exe	96
PID 4604 wrote to memory of 204	4604	chrome.exe	97
PID 4604 wrote to memory of 204	4604	chrome.exe	97
PID 4604 wrote to memory of 4800	4604	chrome.exe	98
PID 4604 wrote to memory of 4800	4604	chrome.exe	98
PID 4604 wrote to memory of 1984	4604	chrome.exe	99
PID 4604 wrote to memory of 1984	4604	chrome.exe	99
PID 4604 wrote to memory of 3544	4604	chrome.exe	100
PID 4604 wrote to memory of 3544	4604	chrome.exe	100
PID 4604 wrote to memory of 5048	4604	chrome.exe	101
PID 4604 wrote to memory of 5048	4604	chrome.exe	101
PID 4604 wrote to memory of 2740	4604	chrome.exe	102
PID 4604 wrote to memory of 4144	4604	chrome.exe	107
PID 4604 wrote to memory of 4144	4604	chrome.exe	107
PID 4604 wrote to memory of 4548	4604	chrome.exe	113
PID 4604 wrote to memory of 4548	4604	chrome.exe	113
PID 4604 wrote to memory of 876	4604	chrome.exe	114
PID 4604 wrote to memory of 3468	4604	chrome.exe	115
PID 4604 wrote to memory of 3704	4604	chrome.exe	116
PID 4604 wrote to memory of 3012	4604	chrome.exe	117
PID 4604 wrote to memory of 3012	4604	chrome.exe	117
PID 4604 wrote to memory of 964	4604	chrome.exe	118
PID 4604 wrote to memory of 964	4604	chrome.exe	118
PID 4604 wrote to memory of 1204	4604	chrome.exe	120
PID 4604 wrote to memory of 1204	4604	chrome.exe	120
PID 4604 wrote to memory of 4256	4604	chrome.exe	121
PID 4604 wrote to memory of 2272	4604	chrome.exe	122
PID 4604 wrote to memory of 2272	4604	chrome.exe	122
PID 4604 wrote to memory of 2932	4604	chrome.exe	123
PID 4604 wrote to memory of 2932	4604	chrome.exe	123
PID 4604 wrote to memory of 1132	4604	chrome.exe	124
PID 4604 wrote to memory of 1132	4604	chrome.exe	124
PID 4604 wrote to memory of 640	4604	chrome.exe	125
PID 4604 wrote to memory of 640	4604	chrome.exe	125

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Unbranded.py
1⤵
- Modifies registry class
PID:3824

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1816

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc00eac728,0x7ffc00eac734,0x7ffc00eac740
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,4925468752786233803,2761987448430841380,262144 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2252,i,1852800841062310623,4148537386348534610,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,8434797216981775297,11427089627845098075,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3280,i,11032402146276562146,9667970326923721297,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3464,i,6691218727709258652,14986116046416305934,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,10797758773331665663,7735517211376034395,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4504 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4632,i,16114200226604724567,13938876938889818782,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4956,i,9781464641914588632,11094408765044374960,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4768,i,13349326293867656524,11664520809070841063,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4772,i,4137183549724227085,7899940598533483026,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5244,i,8624190882613414618,15769544123750407083,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5324,i,5485274136856106779,2911355674520511425,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6400,i,9905716291678063482,11919329484582321998,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3664,i,4998093554330597227,6941405676714934125,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3512,i,13974151180701144135,4308094572957623167,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6536 /prefetch:8
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6528,i,9350668842473933243,862463464905670984,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4960,i,8446934316507245746,6252078004436048897,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4468,i,632846435657291375,4505878013704471524,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6556 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4604,i,15745781104768490446,15383149961635965567,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3460,i,12952660521768946176,9833144800157347381,524288 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4864 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6380,i,7936515595219324391,4146709390326296425,262144 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6444 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6332,i,10747009191443556965,7193627410848910931,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5772,i,9754966309207882870,15533349852713852140,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5768,i,13741332190385231171,7818411507486115513,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6712,i,8457741063995664592,6249607292822187682,2097152 --field-trial-handle=1908,i,1260389226743286419,280247939601859524,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6664 /prefetch:1
  2⤵
  PID:640

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4032

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0947a41c778441957654700dc3f9b3fccf919f303ef7f52902afcd8bbdfaf572
MD5 1f4e2689de12314a42d8e7769b543d62
SHA1 1c47739fbd582c027c2daebf103308b084a2e2f8
SHA512 2771681dcca858f93ca01fef51ea04b981d6c1b8258f3cbc4007b7a21b3c1b87a67b37be2c90ba210f44ef4c91fc29a3be4c37dfd09fccdbf0a7b602f3e43c69
TLSH
T191E0E5BECC26AC6728F90B6865144742E79027572781485B363C960D8FB463A49928AC
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 34KB
SHA256 2eb4d0e3cb128980fe742a1ba48af930185bcad854fdf95efd360ff37534448b
MD5 64e23fcf925edf0eac35c87a30e32661
SHA1 427432a2550be26ebe18e5ce4b5f512c4e0dfe53
SHA512 c24cffe4abbfff4b14c19b986ee28d0848c3ea55aa5c8c3bfdb3051ef1c3320b553358c837b5593d8eb8a130e4fc912ba06ea5e8488bdb89da5b707021ff2708
SSDEEP 768:dmKUFsNUffprmflN1Txob6UjfDp25r9tJ28nGOxHNwprCRnoWkH6YnOi:MnFixlNFxoGEVQv2AxtPREbP
TLSH
T182F2F11BD0A2DD13BAC45F568B9F0B81A9D19305BDB4DF1622B2A737E3B7B4001E2D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 6b6d09875a40f460e1bd13d8ccef0aa160fc26ac8a785a3ef6369c8530d21097
MD5 df91db46ad4ad8ef201fd89073e74934
SHA1 25e700238c5bd599d76fd84288e82b8966e56bfb
SHA512 c0169b979f0477a3a90ee349b5331467a865680feb15867096f3535b80100fa3783dbf792b43af48bc59d0b9ab80eeb0067b5b0f764e6a0989c888c261617f52
TLSH
T16121B155B3FAD70CF7C5407630E8095636312608DA6B0D4F89E134FE7848356333046D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 15eae33b79012ba188ef9fe4cdbba400dbde9a868d53114c2140201e50b9b7ee
MD5 3920bfb6055022f9f7dc695b50b95b88
SHA1 a6fe02a620090a44d63e2e2cf234f6e1244dd456
SHA512 8920285c14c8b40049159016c98101d791cff2913552e400f2c83a6efd1c5b708ebacd1cd43385b6cc9fc19fd01d314c0548d04e3fcccbff0753c24d1d0b055e
TLSH
T1E521BD65B3FAD718F7C4407630EC09663A322608DA6B0D8F89E534FE7848356333086D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 f2e4b1b4c189d51bef2095ec2eb0484a3b01a03083051bb3e3a6cf4b1aef210c
MD5 c17101ab1d500b9369fc716eac0a9528
SHA1 01c60fea2a57fb7f2e9b44b7a0fde9cb9ce353cd
SHA512 4cf03746e197b27c87f2e3032b9da759a79452cb5b3b8a9394efc5e4e6518f0271278093e0fea8ee02f4c529fa2e522a3dab42386284b94ae1765a95acc6abb0
SSDEEP 192:DP/9y1mLoSNJ/JPJMJCPMtZd4UaIaJWOxtFgiObiYPpZ9lPGvPQCSIWeUJWrWmWd:DP/9y1mLoSbhPJMJCPMtZd4UaIaJWOxu
TLSH
T1D942CEF3C3E8866DC91252F06B143E2BCE2909245B6C3C7AC8D5AF4B63E1671E24175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e87795b0-6aca-45f1-9bf4-a8ee705ffffd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e87795b0-6aca-45f1-9bf4-a8ee705ffffd.tmp
Size 10KB
SHA256 4c3d85d0c975f7cb13c2cc15e0805a92ef65afca7e0084c3e5ff937f908369bf
MD5 ed288f22608a5787fdaa91ee7d0c72aa
SHA1 4371174409fc709365984ec3e462262f9d5ce0dd
SHA512 17f7e75ffdb4190d4b1bb50069e60b106e7967d68184b9ab623d3e9136638671de52940e2bb7de222733b2e287a895d30a19a2cfe15587e4a4e43a9823d1093d
SSDEEP 192:DP/9y1mLoSNJ/JPJMJCPMtZdEaIa9DWOlwtFgiObQWaYPpZ9lPGvPQCoLNBSWeUZ:DP/9y1mLoSbhPJMJCPMtZdEaIa9DWOl1
TLSH
T1DA32BEF3C3D8866D851212F06B143E2BCE6A09245B6C3C3AC8D5AF5B63E5671E24175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 28637fd2e68d0a01afb8c70696ada646666b9e3338ec61bb2f9a7c595c4b55f0
MD5 7e3efb8dd5f75f64c6bbd671a113ba61
SHA1 803323c6bce6ef902a030054eca3232c9e654d21
SHA512 ee8f4141c8aecac92968bfe12b3bf0031d263a2221b354af55b0c52fe60f77d5a8d238a5d93ad73642074144eff6e948684ae5b0e46d5631421761f2ca8ea8df
SSDEEP 192:kRystA+Gxv7rhAPRp2OYq98Hsb+WNnXENhW2iK2yYBVyIsnAUgtaJ:kRysghH8Xr6w0G2p2yg8
TLSH
T1AF52F72EBA14697B5CDBC229FD25B717DBF6102160952E84EBFC8A3C04EB5CD221B057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 54e0720c4c9936ce0a047f1e2062cbb8634fb9e9011b9e02becb9897f56546b7
MD5 39289b1bb7e716ace2e086dffecfc274
SHA1 db958e29d83a0c143cfaf05f14bce20c4de977b7
SHA512 f11b58da29c992121d590caedeb97c0bdfe964a7cb085999301cdf512bb56511ea19ba4167e5b5eebfbda9dc968316561ec1d40ec3186be5c49e38d91c83233c
SSDEEP 192:kRystA+lDv7rhfPRp/OY398Hsb+WNnXENTBEbK2yYzVyIsnAUgraJ:kRysL7HtX/6w07EO2yIe
TLSH
T17752092EB914297B5CD7C269FD15BB17DBF6102120942E84EBFCCA2C14E76CD2217057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4e1261b67f6a8ec020e9228a13783da603fd111b29242ed926f289995e1bbc69
MD5 cadf576edfff3b0c83f8c7dcef69a702
SHA1 8b9b60908e2022efe9159379442449765913dda3
SHA512 44ffebd9e40db7383f682d9e95e2ebd18a3a67cb9dd20be8466898e645a006c201893c7e99a1ae9b0e3ba0317a64c41511f963dc76ab75219a0ce97daec6feb5
SSDEEP 192:mRysoA+lDv7rMfPRp/OYh98Hsb+WNnkMYd7gUK2yYzVyIsnAUgraJ:mRysu7HQXZ6wXag/2yIe
TLSH
T18C52182EB914697B5CDBC269FD25BB17DBF6102121902E84EBFCCA2C14E76CD221B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ff1662e2c59f866c55d6d16e192e16f13c5a772858a97e40a4132671d3f88762
MD5 4414d8d0ffd40481898259a121ae4e95
SHA1 da358a0d9406cfa3273fca4589b937e009d6de2c
SHA512 ddc022af04ae786381349704797dbce5a0091d95210f25fadaf1be3839a43806e42293fad1b442cfbc554ec34efea5d73b8b1f03b49c0f3ec6fe55a9e75e125b
SSDEEP 192:kRystA+G/v7rhAPRp2OYr98Hsb+WNnXENhW2iK2yYBVyIsnAUgtaJ:kRysgXH8XC6w0G2p2yg8
TLSH
T14752F72EBA14697B5CDBC229FD25B717DBF6102160952E84EBFC8A3C04EB5CD221B057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c541f49b42ab8bb381d99e7a67775176d24faccfd9bacd1d67dfb4bc7ee8e3c4
MD5 eabf336d92b67285d46fb1adf358e030
SHA1 c604a47ccb18894b7b51b40b930026eda1be9105
SHA512 025b3e306c9d654507f24527f5a258d29e080461da8df1fccf5d8df8759f24dd4d55fcaa67ffbec4440b2bf37eebab5586cf164e670dc1296b7db6d2e8f989d3
SSDEEP 192:kRystA+GDv7rhAPRp2OY998Hsb+WNnXENhW2bK2yY3VyIsnAUgraJ:kRysg7H8Xs6w0G2O2yee
TLSH
T11352F82EB914697B5CD7C229FD25B717DBF6102120952E84EBFCCA2C14E7ACC221B057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 03973a25da0021eab19b8f1369a5523343654f3887234a1e1cc301245a48728d
MD5 e96921d5ae30116aafe48367f7ac6695
SHA1 c6641ccac61c68d82ff32eff425c15feb5074091
SHA512 7547cbfa0fc206b66f70451b792b574afeb0e98365fa6e0b5000e8553976425c99b5d9d4c5ead0b18d87bd8ab8100bb185fc97363145cbc0d2cc4cf9b3e8d865
SSDEEP 384:MajIf7KxkXqKf/pUZNCgVLH2HfgslPa7pLuLcifqrXODID+ErU36SHG6+AwTlTNv:MKIf7KxkXqKf/pUZNCgVLH2Hfgs9a7pb
TLSH
T1A1720B777C4C9E7B0F94C6C8D8167E4FADB6024A65DD886482FB982A03D4BCF114A1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\241ba98b-6582-4168-b9b6-602edbd5c470\index-dir\the-real-index
Size 72B
SHA256 a663161e4e77207c2d6bda6cee58fa91af064207f00a12f36fa261dbaa616a2f
MD5 1a62d201487c1c2fb8cd9af8e3602db9
SHA1 ccb0ee9395bb9c3e198a64cc85b9b7c1fdbb133a
SHA512 74065193607118e8bceb5358e381b8301ce76671fd4ae3d6702d47e21d4656bb78c26239e165cd00441f74b66bd3cd3ea7725bc41b66a52c6d472553aa3a3cde
TLSH
T1E9A0027971805001E74503722052295272135A60A7D2876740F907A4CA52695DB85421
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597d83.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\241ba98b-6582-4168-b9b6-602edbd5c470\index-dir\the-real-index~RFe597d83.TMP
Size 48B
SHA256 4e8d2e86b2f20ce26a76748d2f835e902aa4d22aa8c2abcc0acb4e6e6e57d2b1
MD5 99f2597ddd2c31f7218da77d67e9e3b2
SHA1 f8eb0c69ef9bc8ffa6fb9157ba31e2b3a3cff6d1
SHA512 691383882b8495e4f5f52ddc2e63861719f51f5935009c77924257ed969c24dff681b3f6aa92bde7898541ab1782130ab9710e7e1214d8c9cb6119366b9b63b7
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\index.txt
Size 46B
SHA256 23509185d8e127a08131750d27708ec4763519eba497695a9909adb9e8e0c8ff
MD5 8ab39ea23d00d0c67521e397e03f16fc
SHA1 b83f3bd08fd5b85c2f43c7c35b4838299c5922f7
SHA512 0a654cec28764e575e7009e690342fb2c0b0c51d8608930801afdc7b7312bb5037973b83b07c7f4f47cf296dd39562f0ef214fcf48626583b7d14650ab348527
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\index.txt
Size 133B
SHA256 75b1580f0aa5f37d68bf3f0353143b02974bd8f33c616eae9188300140c5fefb
MD5 78825c6b24fd62cf0802ae949c60be59
SHA1 762d750ce48a5d8995187f04824330b23b3dd774
SHA512 29058607f57c37053c20b8bc92cf1b56127c2803cf267e10f7798a2b23323c2dd6de45898d140062a3a7e6d0be6cfadbd25217043cd7e0ae0ab64889caf07298
TLSH
T1EBC08C2A007410242B0312E00828A68A876ACCEC08A8C028C034BA000C3C41AC204A49
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\index.txt
Size 127B
SHA256 638b518b81cf9d59d1b24a2dfe253371626176961c3d2744f799c3bcbb0f5efc
MD5 83372e07496cf282e803de5aba6aa481
SHA1 358c7feb73b27b86d82f1dc344930c11e499d765
SHA512 7af3c88b09f091bea76931d3190c946742a9bfe04c3b5c134ab4daa0cb34ed2faf4340ef6ad90216325354418181a832fc702c37757699e9406490fca96c4de1
TLSH
T174B09B6F457410246F4357F01D5CE65DD76BD8ED54E5C468C4349D141C1C41DC15574D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\index.txt
Size 126B
SHA256 4758798c98a311ed2c92395ccded3439b5e1ffc44549aab6ad328104062737f4
MD5 646a900f7e7c6358207ef591d9dda05f
SHA1 9c7c02021b94a7c948453e92f75d3eb900ea8f0e
SHA512 76655b731f882ae6d9fd661307705b1fe0f0bc10510d729ce38176dec8d26b95b58f33ed1a0a2008b32fbb5ed74c676adc68c997b0e79834a99d1a87f00dc372
TLSH
T163B09BB741581020961797F52C68E54CD79B94EC14FC8438C46C4D449D19524D345E16
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58f306.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ace11da035dfb41ca7039220d50da2311c7e8046\index.txt~RFe58f306.TMP
Size 133B
SHA256 cfa424a7bb73497bd84a7e432f021fa91848058fed0df315563ea1b636cb8271
MD5 246bc1a1d57545fb6d4b226d275cd8a0
SHA1 42a069dc6101d5ea9488a7a4839691a359e01ea9
SHA512 b78680aaea32ecc5937a08f66bd7ea2f481726419dde2ad84042573300970cb4a8b9364b329b8e9e54f4b75a27c87d7092b0a21f283a2177781e589b3a5f6d5f
TLSH
T18DC09BB741581020A71752F56C74D58CD7B79CEC14DD843CC46C7F449D39535C345E16
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 96d5f749162b5d520da51ecee980c73513ff25b0b0dd926cbcb00164f0bc116c
MD5 bc32a66c3984643a64fdd9e99977b898
SHA1 0c1f47540483a8a25eb1a607e1819661b952c0bb
SHA512 04f8a9e4a2200f2ece6b7dac686eae6caaa7ba67c1866b84f67dd404fc807365877ec221aa2bdf1b2ec1ac3721eb26274e996e39c180b0cd2cf4a64826c07ed2
TLSH
T14AB0125090019601C80302FC11C2248832149F108705231193F0EAB1A8271D04018252
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 a4c50fe43d289cea303977b0d1bd9103140598ef932cebc339f8197ac062c801
MD5 6bbe13f9c91ec3f470035e03ef761a01
SHA1 e276c96c6aa8cbf2ad0ce671f8abf9e198655715
SHA512 28d10bd53d884fc510570786a1b372ce1bd4625a3ea6e325796f07e8848348148d8283e2c998ea1c2ce4b18c8b709975fd49d06c0e262bc51236f48c03d1ca36
TLSH
T1A2C0122AC501E166C03B03B425C3E8BC3114AF28EB17074852E11BE1AB36231C33A161
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a0b0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a0b0.TMP
Size 96B
SHA256 0ce0f9dfbf6494e03cda7a4c3914bd817e94f209fd9d8436d87f94df1920283b
MD5 8ffd3d62cd8198695ba5aec1876c7873
SHA1 4d55adc18ea9b5026e8b46e1bfa60205727082c6
SHA512 8cc47f849a1949888c8044ebe48444dcecc81089acf7e65594d3454513994943004254dab26b68541133218080b5a6fc03de7d143af44b50e3935137e16d0f28
TLSH
T18CB02404D1015131C0054370144155DC3150DF15C103011741D00553CC101700114010
MD5 SHA1 SHA512 TLSH

Submit Download

d1af85df-ca19-46bf-9a15-17a6fd4408e8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d1af85df-ca19-46bf-9a15-17a6fd4408e8.tmp
Size 14KB
SHA256 f13a9f875fe2f7c8816c1204c154b6332f0e6239ce8725724d593a9f62348fcb
MD5 eafa05f5ff5d614bfa7d3194f5fd5a3e
SHA1 2b9480d8cc1e069918635e4f4ee8f975557005db
SHA512 c60726f8d3a0f78f59ea910952c5d861380a6d43dcec75a43edb43d6139a2a4c1efdeb7ade0f9834c63a0064835b256e91a78570cf5091ee9ac727e15ea8b0b9
SSDEEP 192:mRCcBzsoA+lDv7rMfPRp/O/IEzh98Hsb+WNSELkMYd700s20K2yYz8yIsnAUgraJ:mRCmzsu7HQX26wRzag2f2yXe
TLSH
T1C562192FB914297B5CDBC269F815BB1BD7F6242121942E84EBFCCA2C14E7ACD2217057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 8dad290f71e14f4d47a3ed140f10b760f139e38e7b7200b49010c01d1cf039b2
MD5 a320f4b387ec4959f825d97febdd908b
SHA1 fc3b9081ed229dcb1d382b750d74cfd880596d99
SHA512 352955b111f9e64a9578053a02aa84562c83b43479be2600cb3a70aaa9e211ee4701d5ca8eae2182dbb1e97357a7f362400c94484cf40862ee2dac2cfcf2cf3f
SSDEEP 6144:XS/rNxGN1BqcKLYOwtJG98rOk0HOGm/SFyEE3:XeIVJrOjuGdF23
TLSH
T1C41412B99D3A09E3156B06D139783C0BDD35439FA08EBC9E5664DAC932DC3C86F26D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 a49fea743c72acc827bedf22274addfffbf4b922115caab042db3c7d27c5aedb
MD5 cb5d62689fc354578c4bc470b643748f
SHA1 c5e3f4ecbd269cd770298bc85e4bb7f6119596c4
SHA512 e212bc01dc190817858a8124f8d293c2de21e446c20e324108aea4bf56996a2a0a69dac492fa59059a38e7e7f72a9ca5bf3ef926b3a54872b31cfcdca7d0704d
SSDEEP 6144:F6S/rNxGN1BqcKLYOwtJG98rOk0HOGm/SFyEE3:F6eIVJrOjuGdF23
TLSH
T1AB3412B89D3A19E3056B09D034693C0BDC2687DFF09EBD5E5658AFC926CC3C85B16E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 23988e1be7249a659377e80037d03a6f55a4d0c11fbfd60bb7240599d66ee2bf
MD5 70fe0e431f39c18a04f046c3e47fa1d8
SHA1 f0fb04497cc28b7cc9a09b70ad52c3e9f8106a37
SHA512 fbf98364fcb7f2c040a5c0a7f63a6b8c85a827af0599c07ec209fbe7ea7fb962239f56d3f4f6083e94f0faa00f8084fa604343f45d334590ea9daa4ca1c43890
SSDEEP 1536:gJcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3b:Q3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1409302BA4E2A46E7957E46D176AE7809CE12130D70AFA8CC316C639C21D01C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 196KB
SHA256 033dfed38908194a5aa2af02ae40f13d7833a072a2b206af50b2e4cc9cb34c0d
MD5 1deecbe76c36f70e88715b69f049096f
SHA1 e0814af76386c0a284ef79d9f8c29d3a2e5279d7
SHA512 e436695cdb49bcb7249b8a7601d5902229837447600fbef9e3faefd44d6e4df831ebdf18d6362246172d4b66d5890e9a77a80e6897b09e53f3dc277c491e6737
SSDEEP 6144:WS/rNxGN1BqcKLYOwtJG98rOk0HOGm/SFyEE3:WeIVJrOjuGdF23
TLSH
T14F1412B99D3A09E3156B06D139783C0BDD35439FA08EBC9E5654DAC932DC3C86F26D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 195KB
SHA256 cc73d7d4f7a11d0a7fb2f7db8feb8e216c5bd4250973051437126a5720f558c5
MD5 438d68d3a381a1a3cf37f5785fa1db2a
SHA1 694f4efda3f1746f51e15b0eed1e06a9a540c6cb
SHA512 fee0778f0362cf33df2d6a3915899e46650176e0ef2e541e04b13cb004eee613cddf48902c98878c74ec0a881230c4aa9c00a26e8d97b8957882e02de44a063a
SSDEEP 6144:QS/rNxGN1BqcKLYOwtJG98rOk0HOGm/SFyEE3:QeIVJrOjuGdF23
TLSH
T1281412B99E3A19E3156B45D138783C0BDD25439FA0CFBC9A5365DBC922D83C85F22D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 66942c67711dd93569ee7463375d6041ab5f72613a807085f9234d63ac281acf
MD5 8d958de7a583b597d33ff0349f876b9a
SHA1 7cdf5081e5a68862f6c4aaa69a8afe8bb8c4961a
SHA512 c01ba7f012b6f27590434b6ac27dca4377cdb8a9461fbe73c05220228e850e3d0b3cfb88aeb7cb25070bfe5992c37a58f383edafa4c9eee8ba119c2948573f1b
SSDEEP 1536:qHpcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEi:G3Qw/xLANk0mUW5GmRntSFCjEENE
TLSH
T15E9312BA5E2A5AE7557E46D1726E380ACE12130D319FA8CC72A8538D21D51CC2B73E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download