6340657c4f9abba8a7225c571d62e443d3cd1ce63cd0cd0064d02700a2dd3469

Analysis

user interaction
yes
max time kernel
899s
max time network
877s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 13:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3018410.lua
Size 1KB
Sample260429-qagblags2q
SHA256 6340657c4f9abba8a7225c571d62e443d3cd1ce63cd0cd0064d02700a2dd3469
MD5 bb64bc75581c345d2f76d84acd30499e
SHA1 b43a1cb03ec111db04431e3fbddf2c60055555d2
SHA512 6eb20f8a1a79a3800c660ecf1da96ebb5c90f538fd1cc7449a9c7dfd2ec68194e6b45e69c93b29ac18c3b3da3bf660b39a3ca2783e27f8efe73804ce6730723c
TLSH
T1C9213E7BC7F0612F3CA59A2E6E15BC652E49E143925837324129F28FC79F0A3D40A96D
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2132	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134219414499427926"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
336	chrome.exe
336	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe
Token: SeShutdownPrivilege	5100	chrome.exe
Token: SeCreatePagefilePrivilege	5100	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe
5100	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2164	OpenWith.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 3324	5100	chrome.exe	82
PID 5100 wrote to memory of 2556	5100	chrome.exe	83
PID 5100 wrote to memory of 2556	5100	chrome.exe	83
PID 5100 wrote to memory of 2132	5100	chrome.exe	84
PID 5100 wrote to memory of 1064	5100	chrome.exe	85
PID 5100 wrote to memory of 1064	5100	chrome.exe	85
PID 5100 wrote to memory of 3396	5100	chrome.exe	87
PID 5100 wrote to memory of 2232	5100	chrome.exe	88
PID 5100 wrote to memory of 3396	5100	chrome.exe	87
PID 5100 wrote to memory of 2232	5100	chrome.exe	88
PID 5100 wrote to memory of 1148	5100	chrome.exe	89
PID 5100 wrote to memory of 1148	5100	chrome.exe	89
PID 5100 wrote to memory of 1184	5100	chrome.exe	91
PID 5100 wrote to memory of 1184	5100	chrome.exe	91
PID 5100 wrote to memory of 4748	5100	chrome.exe	92
PID 5100 wrote to memory of 4140	5100	chrome.exe	94
PID 5100 wrote to memory of 4140	5100	chrome.exe	94
PID 5100 wrote to memory of 3364	5100	chrome.exe	95
PID 5100 wrote to memory of 2452	5100	chrome.exe	96
PID 5100 wrote to memory of 2516	5100	chrome.exe	97
PID 5100 wrote to memory of 4400	5100	chrome.exe	98
PID 5100 wrote to memory of 4400	5100	chrome.exe	98
PID 5100 wrote to memory of 1488	5100	chrome.exe	99
PID 5100 wrote to memory of 1488	5100	chrome.exe	99
PID 5100 wrote to memory of 3992	5100	chrome.exe	100
PID 5100 wrote to memory of 3992	5100	chrome.exe	100
PID 5100 wrote to memory of 3916	5100	chrome.exe	101
PID 5100 wrote to memory of 3916	5100	chrome.exe	101
PID 5100 wrote to memory of 776	5100	chrome.exe	102
PID 5100 wrote to memory of 776	5100	chrome.exe	102
PID 5100 wrote to memory of 1880	5100	chrome.exe	103
PID 5100 wrote to memory of 1880	5100	chrome.exe	103
PID 5100 wrote to memory of 3736	5100	chrome.exe	104
PID 5100 wrote to memory of 3736	5100	chrome.exe	104
PID 5100 wrote to memory of 3552	5100	chrome.exe	105
PID 5100 wrote to memory of 3552	5100	chrome.exe	105
PID 5100 wrote to memory of 336	5100	chrome.exe	106
PID 5100 wrote to memory of 1260	5100	chrome.exe	107
PID 5100 wrote to memory of 1260	5100	chrome.exe	107

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\3018410.lua
1⤵
- Modifies registry class
PID:4588

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2164

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb86c7c728,0x7ffb86c7c734,0x7ffb86c7c740
  2⤵
  PID:3324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,18085502397059821462,16530338666758842736,262144 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:2556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1468,i,15906864431666760558,7733956517328915632,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2192 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,9354030640444731653,1111512824406669919,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2404 /prefetch:13
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,126990745322935202,9231348150096527739,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3268,i,8779805811763654727,17002558832852039148,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4224,i,5983083691835544859,15511712844379183388,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4240 /prefetch:9
  2⤵
  PID:1148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4408,i,8274238143958591468,5843804351152779198,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,6604134002556614036,2268221952453847495,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5920,i,15227821289387671789,3062569343199993657,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,2883257480947905464,5131585147505818472,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3308 /prefetch:14
  2⤵
  PID:3364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3324,i,5637644325291781477,6756976196342247158,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3620 /prefetch:14
  2⤵
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3240,i,13083021391745007069,2144265820930087920,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3064 /prefetch:14
  2⤵
  PID:2516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4244,i,2092380193133239118,6193630811675211071,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5936,i,1428245720411292161,10569268102650274484,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6008,i,2968972373676615350,17598507808277223766,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4312,i,278387474444055347,862905641682954225,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3064,i,11858114220097865413,17868585723133332316,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5944,i,14289091940833019639,10507406329373750863,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3596,i,3973684548580759111,16425179885199289973,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=872,i,8451012293397582840,11635683501417386703,2097152 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:3552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6128,i,9153574844749066193,15659330126528224490,262144 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5648 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5876,i,156494821097961924,5959677197490441214,524288 --field-trial-handle=1884,i,6193425497961023924,5356424888736939783,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:1260

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2432

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5a2bd403-e1cc-4fbb-874e-cace1a3a5292.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5a2bd403-e1cc-4fbb-874e-cace1a3a5292.tmp
Size 414B
SHA256 7f5f9b03d725e36e22cbf4c156713c39d8740de3b318f966da3cebf83a3d385a
MD5 5ddc7270be6a45d03e6953baf70e52e8
SHA1 37d4adfc38c071d87ceb093899f74f2e9beef686
SHA512 6aa5ca7fa1c4740a92ca7afe6d33db6520801dd99b41ad491ad89508527b3d6c8b90ec6d2a2ac14c62a1b3056c58ea3cd31266b70132d0c3f41c531b5521bbaa
TLSH
T16EE09BDAD921A82B18FD576970544B86F760135B27418D4F3B7C920C4FB063B4ADAC5C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 c17ac8eab00c86659da9328a42ff1d687677e752ecfa31339199e8b855f4ad15
MD5 f9903de81c96e369e1b26faaad319a9e
SHA1 b5e026b7ac1566a53222909995616e416482749f
SHA512 2a7bb5195f3d4c462c5910897112fb34196e1057cf0d48cdbceeef433d32668ed45a5d22573c198dd31b248f7c4c193b5cc2cc8eb4e5ace1cf79011575c7f43c
TLSH
T192E07201828F244ECBB91BF2E1E4D8307E3807C20C4E2BBAC688D0DAA2136B1D100A12
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 408B
SHA256 c05914546707c9eaba2d05fa2eb4c0d6f670ea07a2c8db732471cc5fe1966c2c
MD5 48e22e59ef68de33774bdc34d6983c18
SHA1 0b7c903a352d3303c8ade53644391b73017b2467
SHA512 e75b79f19b5f21dd74a52bd953d88b7288f2bc6deb4201b91ac77bdac4b327e395756248d8b17b51b9d74569786988eec2a91a29279d9ba0f780e0d049b81790
TLSH
T1F5E0C205926B2448CBB467F2E194D8307A380B96091E2BBACA998186A6536B1E000552
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 cf793191d5ef35d96503a6da3dc1efa50abd3414303d69e25801c55aca7dcac0
MD5 1394799613f7b5167b2b5beb0531b7e8
SHA1 b3e50e16a9177e8ab62b7a7e581cb0ce7a9cfd29
SHA512 653c5cfa73215379cb428b19f6f5aa2d8f8d14f8ecd38a128c4f96c54e631328bfc595dd0c979b0b21f585f5b24ef26741d831178541ad6c69da002ede0b0398
SSDEEP 192:Ds6fgGUmjJSRIaaRN/hMzbOSF5FaPCvYfPONPtNQil:Ds6fgGUmjJSRIaaRN/hMzbOSF5FaKwfk
TLSH
T177D17AF7C3D8862DC95156F4AB256F1FCE2D0A25031C3C2688D9AF4B93F2871E21565E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 21f0d11df89d9f39264e8eea894aebc53dcaf9286a90f33d79059affb84c6e73
MD5 93a717e32cb546cc1b1a4816ca3f0868
SHA1 0d2865fad3d693c8f7b79c6f309789a134cc3e9b
SHA512 97a48ab7cee99d1070312dc862f06a19a18bb6d444b948d026a30c90dac350ecfe4352a514d3b3295ed10b9cc2c9bfcc306cb3c3d38a7e8ba9c61c09f42cd30b
SSDEEP 96:DO6utxwlJJ5JwIaaRN/dMzuqkUFaPCrbqfPiNPiNQiVZkoT:DO6utxwlJJ5JwIaaRN/dMzuqkUFaPCvc
TLSH
T1CDC19DF783E4862DC91196F4EB15AF1FCE2D1924031C3C6689D8AE1793F2872E25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 575b6c2ed38320ea0b32b8f9b0ad410c4ae18db08c490568131f1eff152e6689
MD5 48c65064fb9899e8c3bd2c8db0b9cd09
SHA1 bdac4a67523e0a868df9a12d306ae8a67caa600d
SHA512 83d971e0b7401f9e6a072cecbb5eec46c3d312d519b7ad7e9818ce2caa4908a67198745dedf330826162e8225f4c702fa0ee4dd07445e8e233e857065985ea9d
SSDEEP 192:Ds6fgGUmjJSJwIaaRN/hMzbOk5FaPCvYfPONPtNQiUkM:Ds6fgGUmjJSJwIaaRN/hMzbOk5FaKwft
TLSH
T1A2E18AF7C3D8862DC95156F4AB256F1FCE2D0A24031C3C2688D9AF4B93E2871E21525E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 16f90a6fa3fc5347f1ad93dca19ec766f78398903a26e68c98d85242b233d334
MD5 714ac4c7f4c355fe2b08dd9355d75fbb
SHA1 c0dffa5c6ca573b6d2714296dd1b1d451efd96e0
SHA512 a71ece2bddb64ae50215fb2ca881effa143450bcea2ff16b6a4660a4dc1601eca8f3686efd546a997de8684c9b7f1d88a15c2d2bb00ce1453c93b649cc650596
SSDEEP 96:DOhutxlJJ5JEbIaaRNEdMzuqkUFaPCrbqfPiNPiNQiVqUjhnoT:DOhutxlJJ5JEbIaaRNEdMzuqkUFaPCvx
TLSH
T166C1CEF783E4862DC91196F4EB15AF1FCE290524031C3C6689D8AE1B93F2872E25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 afc33ff019c86c23bbf006cf612e19bef6191254c8ba857f9ad832618069663b
MD5 5da734749cb861f82a82b946ebb956d7
SHA1 96b62a910b2173132ea3da613c748e7b7fca51e9
SHA512 9aa17cbda69acf157959927c8492ff9092beb8b5bd3278c11435ae148695ce35b4ed16ed9fbae3ab6046df1656f498a40df772bdd318a7de537906dde6c899dd
SSDEEP 96:DO6utxwlJJ5JwIaaRN/dMzuqkUFaPCrbqfPiNPiNQiVqk4jhIT:DO6utxwlJJ5JwIaaRN/dMzuqkUFaPCvW
TLSH
T117C1BEF783E4862DC91196F4EB15AF1FCE290924031C3C6689D8AF1B93F2872E25535E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1023B
SHA256 48415d9586fbe87369c753183181890451672382d21f307a648d517320f727c0
MD5 b019ed72f16c6f2d85a981248e0ff075
SHA1 da5cb67228479ccdd6e69a8f775ba53909348cb7
SHA512 9049680a79a07171e980a25bb505a2a625777896e6c0cb49602a0d69afeab304d0ab87d9d288ca693d49a2c37dfb1bc008afd6031ca85c2648902edbdb0063e8
TLSH
T118117BE7D67AB42B60AE897B1D047C4A6CBEA836068154F4CEA7C17CF0C64E71B12857
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c8f0787dfaaef5e263329d216235e98999f5bb6f5b486844d61e05cfcb85a96d
MD5 7431964084202c70f7befee294b00d56
SHA1 1d809e4caaf85929d5096371b7600ebd8d1dcb65
SHA512 d51de73990b78074594d39d15f6cb0bac5fe6309d41f7cb4b6500294a68ac911ce0d159c1dc03df1ac10271486763723fcf7f217403d78f0e33e1f566371371b
SSDEEP 192:DRCUJ7q7wYv7AhAPRp2w9qHsb+WNnRe0KMekw5fQ6TPjVyIsnAUgtaJ:DRXJjEs8Xz4wk0Y5NTd8
TLSH
T1F142E92EA914693B4CDBC22AFD617B53E7F1102531941E88EBFC8B1C15E79CD621B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7b9ee9777f98f3d3847597824debc390cab1cd9b3a80d96a1ebf070274082be4
MD5 0985765927834f4671a67c6ad38b2cef
SHA1 09edd8327ae0bc7657883e7e46728fa9274657ab
SHA512 3567f52ad537fa133007c1c58040f5e3237db22618ae1e664df24ac55f0abb13b12bb66ef60166b72eac30efe99ca381f794ba7f11c21d708b87fb2cf0cfb50e
SSDEEP 192:DRCkcBzJsq7P2v7AhuPRps11/1p6j9qHsb+WN4LReHfU+1SJt2MMekw5fQ6TPfVK:DRrmzJzCsiXE9S4wVc48t2u5NTxe
TLSH
T13B62F72FA91469774CEBC22AF851BB17E3F1102561D01E88EBFC8B1C15E7ACD210B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a1ed44cb74d3dea44d8946d212ab6597629ed6d7e41bfe6fe628bc3a563659fc
MD5 8a3d6404debb0c6e05941efd92eeabf3
SHA1 6fbd8e50c4faf61968a890ffe5a8b611f525df9e
SHA512 591d79c0c1a70a517aa9630b6cf23f37799d1ff8bad4afd42e84d22b9671eb7c4c43105e2157791e6ee80bce47f83469cbd0141e6ba615bc2e6378c45ae919fa
SSDEEP 192:DRCUJ7q7Mcv7AhAPRp2w9qHsb+WNnRe0KMekw5fQ6TPjVyIsnAUgtaJ:DRXJtIs8Xz4wk0Y5NTd8
TLSH
T1A342E92EB914683B4CDBC22AFD617B53E7F1102521941E88EBFC8B1C15E79CD221B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 d2bc47b6da6af323d6f236858c62a9c8fe7d63bb4eb850263dee166486df68e3
MD5 0e76d2f3de90c69587c61285b00c5a81
SHA1 c3947fd37b027142940a2f6a9672b0ccfeb8030a
SHA512 86cc9f1c0f2645c1b9a8f9de3505559fc62a5de34e045463706559add761b00c7d6631b5a3e8dc87ee3de23cd2b0431e5380ff6dae4af9df1156109fe590771b
SSDEEP 192:DRCkcBzJ7q7Pnv7AhuPRps11/1p6j9qHsb+WN4LReHfU+1SJt2MMekw5fQ6TPfVK:DRrmzJAvsiXE9S4wVc48t2u5NTxe
TLSH
T1C762F72FA91469774CEBC22AF951BB17E3F1102561C41E88EBFC8B1C15E7ACD611B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a3d3bf6bc5c456f5cabf760bd629277b0a7b4ff10a79414efe2a9a31be399a5b
MD5 688d6b2bf9c388fc1158c277583ef546
SHA1 832657f061500648e7ccf5dd183a81c678e8bfa9
SHA512 82fc3c1bcfda7fa3ed3d7b3e75eeab8e1aaef2bb6e5facf34eb443ed6307b5cac812569792bf3e15be8883d8898d3e6889aea7750fc3abd0d5258bf3ace69b38
SSDEEP 192:DRCkcBzJ7q7s+Hv7AhAPRp211/1U9qHsb+WNnRe41SJt2kkMekw5fQ6TPJVyIsnB:DRrmzJr+Ps8XC9U4wk68t2km5NT3e
TLSH
T15552F82EB914693B4CDBC22AF961BB17E3F1102561C41E88EBFC8B1C15E79CD621B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 02c5e699b2346e6f0433b61d3a5b0852649472d25ba2862222286a561ae1c468
MD5 5e59e930f4aae57b5454b41ddebd205b
SHA1 212acddb60aa82b3e366fda318ae0b61c4b08a5f
SHA512 554db6ac4d801c4708a8cea6d2c0005709390d720d0d7a3b96b86556dbfb324086729a31dd9ea9060bbf87fd3c0c3b57c6716d8bd2b33150a8b2138a5dc68598
SSDEEP 192:DRCkcBzJ7q7Wnv7AhAPRp211/1pw9qHsb+WNnRe41SJt2kkMekw5fQ6TPJVyIsnB:DRrmzJ9vs8XC9i4wk68t2km5NT3e
TLSH
T1E052F92EB914697B4CDBC22AF961BB17E3F1102561C41E84EBFC8B1C15E79CD611B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
MD5 e1d791f76039330e35fa0e1827d639ea
SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
TLSH
T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 bdbba3c04b8664502af0a3eaad33d24f36f0ae9ff5344a3089e7c9165bce3cda
MD5 9b7cd792d894f3d2d1dc7e0af02064a6
SHA1 850ff11bf00a43e265fa37dfc1196869d4af7bb1
SHA512 bab4da8d4e51fd9a2ba74c5822b5e948d98e5bb3ff712b483fe94d593b38b90f61538e8b0475aa24df9983bd19df0ab981918b7dcabad4c0a98e3a21514d2cb0
TLSH
T1EBB012B080426641C00306F41587049C7218AF11D706130253E0A9B198366908124160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585bc7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585bc7.TMP
Size 96B
SHA256 772eaa3ea01451b05d64f02a1746a1af8eaca904f2624c0656c15fc18b469c66
MD5 8f1532a64b38f821db87967b294f7001
SHA1 6607f4619c952c5160987bffdeddf3dffe11dcd2
SHA512 5ac5e7de2d2ca59897c002dac4f2a871b1824a0b45faea57aca233ca69607e4b2215b2e1fb00682d87415c6e1de6e56934a90a63ab2b9ea1493c020bc9ef7375
TLSH
T143B002D5C1026213C14E43B8299D96D871B0DF2DC6031226A2E15EBBDC256B04526571
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 495f54559abad63f29ac38712092d10e8728c133fb666fad168932c02723148e
MD5 f7fff1f06d666011e8dc332aa78e08ff
SHA1 b30e32813e52b435ef8d7e5685b7a4ee3ae7dc7e
SHA512 d7b2b88ccd70ab86a677e030b3ffecc3d1d37e8494a6b9e16b7391d4a0f8bc4b28a219600ef595d6706fc2423585f9b78a41869d28255adbdaf073b10fb156e1
TLSH
T188A00455D5511033C5D047F010C355C1F3774D754107031D45F107CDFD55155CD45000
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 4c44563b0191df1d28ee27f15106eb4cdda62d146a8c2bc4550f678a7b7045e9
MD5 e2f0c8c247b3d8fdf2c4f5b6138b5bc9
SHA1 5ea023e7393c479c12dfb788dff0a44f6aa9341f
SHA512 64ed7d5a308a78d59ed4180f909b96d05830d4ef7c46d42d51f5cb81708e6a01f1eb6f14f0422459ed4d1a87649c31f01eb7184dc8652ec3415eb3145f78017d
SSDEEP 6144:dNW0YRSVP7ExboymtdkN++JjcMW2VcVL4:bHP7UPmjWOMW+
TLSH
T18A1412F2AD06B9B9137663B68007ED588CF2C9CF241078BE50963F0E18E935247DBE65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 bc2d7088d5fbf77b8b838692b179eab906468c480731d23453de3520fc50a00c
MD5 965f4f0d62f34d112039e29c8c53be94
SHA1 5dfd5949e597d91a845486636ae9e6d0044aab23
SHA512 4100939f9b94b4383422272ea28fb64328f1f8050ff5e18f9b148fb8986d64fe0f59a8e0dbc731917ca9a00aa48b0e06185608be14ef55915404b01cb1e67ad4
SSDEEP 3072:npM0+Q0XtRUTVPuO2rxbipJ9y6VYgnddkXd++J3qUQm08KMWF0bFTcVHr6zz:nW0YRSVP7ExboymtdkN++JjcMW2VcVL4
TLSH
T17F1412E2A906B9BA137AA377D017DD288CF2C9CE201068BF50D63B1E15E934247DFE55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 167895d4ca7b75d166989828a72b8deb83ad14f0e5eefc6cb59fc2a4e06491d2
MD5 17937f1ff4d939d10d1de98c336d48f0
SHA1 1348b0ebb1e1c1b69f8be13072e06113877c96c2
SHA512 436b7859b3bc0cf928db39f991ee1606813a63b96bbe22b0cc24926e31116a2c3084ea76a38dd35cf46e02bc4b3215dd3d16ce6396f5b3a72bfa70220ee9472d
SSDEEP 3072:IpM0+Q0XtRUTVPuO2rxbipJ9y6VYgnddkXd++J3qUQm08KMWF0bFTcVHr6zz:IW0YRSVP7ExboymtdkN++JjcMW2VcVL4
TLSH
T1AC1412E1A906B9BA137AA377D017DD288CF2C9CE201068BF50D63B1E15E934247DFE55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 5e1c98d51137738f0a96802dfc327b6fd51b5ae7e7703ef77067541674c440dd
MD5 92d2ed12831effcffb65eb687e6d5515
SHA1 f622c750aab7ea8be4a80ff21ca3cf039b41dd3a
SHA512 5e4c024433914df23f91995ff98f5dd18efa7392349825632eb8e2766a8f251c2c4b18a0afef5e2c2ff6eade0b4f2c0b967cd30878bd6536a72117e6c689405e
SSDEEP 1536:hZ4P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:m++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1889312BA591E7D39536AC396D0079CAC8CE3DCDE1514557C30C7AB1E14BA393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 b14819b41c96ee54fa9521be7c32f76c889fc36705d2882eacc9baa0fbb6db08
MD5 864021fc02d884d17106c0688ddd9bb9
SHA1 b9c03864c1ce652e1058858b1744c429e8254627
SHA512 d9ef4c2040d59769c1f69ff971a507ea66c6bd099e0a2b6fb2687f9358dc3d531f061922be689f251549838b14f11aecfcd9a31d440480e80af7d6d73d297315
SSDEEP 6144:VNW0YRSVP7ExboymtdkN++JjcMW2VcVL4:THP7UPmjWOMW+
TLSH
T18E1412F2AD06B9B9137663B68007ED584CF2C9CF241078BE50967F0E18E935247DBE65
MD5 SHA1 SHA512 SSDEEP TLSH