hxxp://ks3-cn-shanghai[.]ksyun[.]com/sandbox-region/blockman-pc/test/blockmanlauncher_boxed[.]exe

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
299s
max time network
298s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/04/2026, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://ks3-cn-shanghai.ksyun.com/sandbox-region/blockman-pc/test/blockmanlauncher_boxed.exe
Sample260430-lr4e8sc13t

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3312	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134220160351080014"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
2288	chrome.exe
2288	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe
Token: SeShutdownPrivilege	3048	chrome.exe
Token: SeCreatePagefilePrivilege	3048	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe
3048	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 3048 wrote to memory of 616	3048	chrome.exe	83
PID 3048 wrote to memory of 3312	3048	chrome.exe	84
PID 3048 wrote to memory of 4272	3048	chrome.exe	85
PID 3048 wrote to memory of 4272	3048	chrome.exe	85
PID 3048 wrote to memory of 2608	3048	chrome.exe	86
PID 3048 wrote to memory of 2608	3048	chrome.exe	86
PID 3048 wrote to memory of 1520	3048	chrome.exe	87
PID 3048 wrote to memory of 3968	3048	chrome.exe	88
PID 3048 wrote to memory of 1520	3048	chrome.exe	87
PID 3048 wrote to memory of 3968	3048	chrome.exe	88
PID 3048 wrote to memory of 4264	3048	chrome.exe	89
PID 3048 wrote to memory of 4264	3048	chrome.exe	89
PID 3048 wrote to memory of 3164	3048	chrome.exe	92
PID 3048 wrote to memory of 4124	3048	chrome.exe	102
PID 3048 wrote to memory of 1216	3048	chrome.exe	103
PID 3048 wrote to memory of 2328	3048	chrome.exe	104
PID 3048 wrote to memory of 2088	3048	chrome.exe	106
PID 3048 wrote to memory of 2088	3048	chrome.exe	106
PID 3048 wrote to memory of 3388	3048	chrome.exe	107
PID 3048 wrote to memory of 3388	3048	chrome.exe	107
PID 3048 wrote to memory of 4620	3048	chrome.exe	108
PID 3048 wrote to memory of 4620	3048	chrome.exe	108
PID 3048 wrote to memory of 4940	3048	chrome.exe	109
PID 3048 wrote to memory of 4940	3048	chrome.exe	109
PID 3048 wrote to memory of 4424	3048	chrome.exe	110
PID 3048 wrote to memory of 4424	3048	chrome.exe	110
PID 3048 wrote to memory of 3360	3048	chrome.exe	111
PID 3048 wrote to memory of 3360	3048	chrome.exe	111
PID 3048 wrote to memory of 3016	3048	chrome.exe	112
PID 3048 wrote to memory of 3016	3048	chrome.exe	112
PID 3048 wrote to memory of 4400	3048	chrome.exe	113
PID 3048 wrote to memory of 4400	3048	chrome.exe	113
PID 3048 wrote to memory of 2288	3048	chrome.exe	114
PID 3048 wrote to memory of 2672	3048	chrome.exe	115
PID 3048 wrote to memory of 2672	3048	chrome.exe	115
PID 3048 wrote to memory of 3060	3048	chrome.exe	116
PID 3048 wrote to memory of 3060	3048	chrome.exe	116
PID 3048 wrote to memory of 3096	3048	chrome.exe	117
PID 3048 wrote to memory of 3096	3048	chrome.exe	117

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://ks3-cn-shanghai.ksyun.com/sandbox-region/blockman-pc/test/blockmanlauncher_boxed.exe
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb285ac728,0x7ffb285ac734,0x7ffb285ac740
  2⤵
  PID:616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,1754827652342741266,7762230709844970007,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,11371528963220362383,11904705868618218110,262144 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:4272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,11959935212738524233,1668513493911716441,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2336 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,15714050669958968082,17203320192462204248,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,6511188421717154703,7988095242594425445,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4360,i,2808801905160292387,2579455776196777331,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:4264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,9571680234086080849,332747585330367604,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,7195014167903552865,8338065853517881403,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,16833944190195656973,17832431472881374009,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,10454465594864689649,7853150927574761546,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4344,i,2853991990549930997,13332184948964637008,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3464,i,7316431238293550646,12006076743291838154,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4468,i,704559564771618373,8708608006793570785,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5572,i,12422244368841275788,17267531984687622726,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4364,i,6810983392291701741,10522543842975334873,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5496,i,17258647298245607236,16794358531642832603,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4488,i,13682438590930655117,2985306195195380350,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4388,i,12135969654990105823,17014435760670671693,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4440,i,5533720173030372271,15975018482414448021,262144 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4616,i,14102167088561992338,2541067797169943962,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,12912803460005121890,2739483640799572686,524288 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3220,i,4392460094157992754,17334370586300000879,2097152 --field-trial-handle=2060,i,11711847612877872573,9051856803135394789,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:3096

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1224

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:504

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 766302cda0b1a260a342bcbf1919ecbc41ed73837c3220af57ebadc4edf7013c
MD5 0cd0108399cb0aeed76a746cf421722f
SHA1 112550859c7c3dee0529a8324fa2b9a7a955c1ac
SHA512 ff16b757e28c4b0055684741608fc499346e90fcf115cdff767cd9e17be2c2323d4701870b21a36ce0cccd1e94f60aa3e559dee170014a5531b072ea72c458bd
TLSH
T1B1E022AEC826DC3B0CF90B68A1044A42E740279B2781891F373C920D8FB467A468286C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b26e5dbea4471d05604474ae66d828257ccc49948937f5558f4fdfbd612f51c0
MD5 ce6418f4376cf05513351b894478822b
SHA1 8dc101ead26b31551d74d2cab89342eb93e0143f
SHA512 c7cacb0e1c4588a84da6d8cd37a5e76519feb8c633d12c85861abffa6969399751498f678f95634f0c3d0d74c6fd5ce33f83572b49676315eaa130a430affb6d
TLSH
T1A141BEF793B4997E861196E4EB156E2FCE6E0524031C7CA288D4AE1B53F2972D10079F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9945f69f96aa6b5d75a5a65f4802ff8e31d932f430d1c96af7d14adaa2f7b47c
MD5 982ba1e784bad5eb3a97dcf873cb5b40
SHA1 45466ad93d4371ad9373eaa14510638d7c910139
SHA512 13665e32d2ce7a5a5c2cdc890e28cefc33053cd364d3a93d721907b505aec39498d868a687c7439a9b3f0f63bc50e60502eba2cea18e293b160ad663b69f62f1
SSDEEP 192:cRpPYS/J/NOJ2v7rpAPRp2m98HePb+WNnyZPLkzk2aKkwLmnVyIsnAUge:cRpPtN6CHUXF6gUPYzk2aKSBe
TLSH
T11342D62EAD24387B9CDBC21AFE257757DBF6102160942E84E6FC8A3C14E7ACD2217447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 150be888e212b21201a842c96bdee899544775f6ecae82a76da1e8055f54089d
MD5 fde89250607b63093c6e28dfd17cfd24
SHA1 9a8fd1bcde88348452e473a3c1ffd14569271fed
SHA512 01781dbdc107947c4ca5166e53ac9d280d4d7743096ff3caf77903d5faed0a35b4a9ed42dfa134839cc459bcafb6d96af93ce2d79eb1c6c8652f1748c586d180
SSDEEP 192:cRpPZS/J/NOJzv7rp+PRpg2I98HeHb+WNnyZCAv2Gkzk2aKkwLOnVyIsnAUgE:cRpPQN6LHKXU6YUx2Pzk2aKSBE
TLSH
T1AE52D62EA914287B9CDBC619FD25BB27E7F6102160942E84E6FC8B3C14E7ACD3217057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c9192dd456b8c8df065803f5074f0f5b5dad29ea68dc33d8daca2a9e913e8649
MD5 ecb6f3a49b890f089ef7985af52be011
SHA1 cc9c85bd9db1e048f146a576bbf5334c824ea727
SHA512 b3f15b9384c25dd653d65f726dc9c50973e0a38383490c0c6d55297fc99d9b772a54d110ab6c8f4386987cfb8129e20b4a0e73b25d58a7db278c0306b0de01f5
SSDEEP 192:cRpPZS/J/NOnMv7rp+PRpg2I98Hejb+WNnyZCQW2Wkzk2aKkwLOnVyIsnAUgE:cRpPQNYYHKXU6EUM2fzk2aKSBE
TLSH
T16852D52EA924297B9CDBC619FD257B67E7F6102160942E84E6FC8B3C04E7ACD3217047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 30a3fd10292c10d70163882d7a8ed3d28f78ff1c9c4b95bd5184dada013cbac5
MD5 31a35425cfb8f4186643da5af6d21175
SHA1 13d1efd50a918e2a2af2173d9d42eee26f2e8e99
SHA512 65cbcfac09ca9c73b24126619d7a6f276a81b4d7b604b4a5c40b175aa844f9998ddfa3d585add865268579655d8a8213a42d45c7a6ae1e74cc9b740e144dc854
SSDEEP 192:cRpPZS/J/NOndv7rp+PRpg2l98Henb+WNnyZCQW2Wkzk2aKkwLOnVyIsnAUgE:cRpPQNYdHKX564UM2fzk2aKSBE
TLSH
T16A52C52EA924297B9CDBC619FD257B67E7F6102160942E84E6FC8B3C14E7ACD3217047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 36587bca01d86703ee0a7cf218563c53fb91792e5b10d07fd8c8d13031243b3f
MD5 9c2930eafdc32350215b22acd78f48ca
SHA1 008a7d7b879de3701b2f8cdfab93faf1bd3b6732
SHA512 ea9bf405fa174ec3c54f0352cdaec7572ad3655b3e65b904375d8810456640b3ea8e2f73afbcf075f6abebf281feb64328d23d8a74ccad9bd05325f1d4d92407
SSDEEP 192:cRpPZS/J/NOJ5v7rp+PRpg2E98HeTb+WNnyZCAv2Gkzk2aKkwLOnVyIsnAUgE:cRpPQN6ZHKXI68Ux2Pzk2aKSBE
TLSH
T1AF52C52EA914287B9CDBC619FD25BB27E7F6102160942E84E6FC8A3C14E7ACD3217047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f5f9ef3a7f2c9e6d6f33d97ae275634f81d50e541550a31c590375ab736da1bf
MD5 5f45692d26083bd58b96b10bb6caa7f2
SHA1 2f9246cca412bbbd8cc2aff261dfd1cd57fcb8b3
SHA512 36a5c4fc3876ba3934d56d18a36af237be8e3af9807ad5d95c30f5690e661cba15aaf03f262ffc77f1c1ce42b39233da65f90303387569015c73395d6983d8ae
SSDEEP 192:cRpPZS/J/NOntv7rp+PRpg2l98He3b+WNnyZCQW2Wkzk2aKkwLOnVyIsnAUgE:cRpPQNYNHKX56IUM2fzk2aKSBE
TLSH
T16452C52EA914297B9CDBC61AFD257B67E7F6102160942E84E6FC8B3C14E7ACD3217047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 20a352aa624de9f18e4a5991dd19da1357ad870feee36273ab779866e4a4eb54
MD5 c6c5106f00aca7087e5eefe3b65ed408
SHA1 055a5926e8198c08d17ea4b6c02cd8063c534243
SHA512 93adae1458297563c9a6e0cbb23955dda668ea31e6c44b6731bb7b87128fc617f29b642080b3b98973731356be20661f3316b384cc2f2c4fb3286e16dc0d9f21
SSDEEP 192:cRpPZS/J/NOJPv7rpAPRp2m98HePb+WNnyZPTkzk2aKkwLynVyIsnAUgE:cRpPQN6HHUXF6gUPQzk2aKGBE
TLSH
T10842C52EAD14387B9CDBC21AFE257B57DBF6102160942E84E6FC8A3C15E7ACD2217057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 cefe405df11717aa3cf87a0f29f9a2f3e5558c96d38ce534d2203b61d800daf4
MD5 f24811675390557c10872ecc1cc70108
SHA1 13eed8f6c031aedf8d5a8f1f2f179360074df74c
SHA512 92ac28a217dfb32a5874a3ed72bb5de48f43ec39e0c3642e24bafdd75778fdda34bab12faf04e3daa41ec2ab319b2f87aaef286562b5a11321581fdb563d81cf
SSDEEP 192:cRpPZS/J/NOJev7rpAPRp22E98HeTb+WNnyZCAv2Gkzk2aKkwLynVyIsnAUgE:cRpPQN6aHUXi68Ux2Pzk2aKGBE
TLSH
T1B852C52EAD14287B9CDBC619FE257727EBF6102160942E84E6FC8A3C15E79CD3217447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 03973a25da0021eab19b8f1369a5523343654f3887234a1e1cc301245a48728d
MD5 e96921d5ae30116aafe48367f7ac6695
SHA1 c6641ccac61c68d82ff32eff425c15feb5074091
SHA512 7547cbfa0fc206b66f70451b792b574afeb0e98365fa6e0b5000e8553976425c99b5d9d4c5ead0b18d87bd8ab8100bb185fc97363145cbc0d2cc4cf9b3e8d865
SSDEEP 384:MajIf7KxkXqKf/pUZNCgVLH2HfgslPa7pLuLcifqrXODID+ErU36SHG6+AwTlTNv:MKIf7KxkXqKf/pUZNCgVLH2Hfgs9a7pb
TLSH
T1A1720B777C4C9E7B0F94C6C8D8167E4FADB6024A65DD886482FB982A03D4BCF114A1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c2f4ad076d07f8a2d84bde6a0eea65be642af61917ac5e3c71a2c7a7a73f74aa
MD5 8cf77a0bb70f51d74a4447e4bcde9490
SHA1 0f248407820564d5d0353120e0447562b2a534eb
SHA512 fdb12b6194539974e9091bdf36d83dbc879befdc507827a6a7c3203265e8624e533f1a9c0b11de18817e845baa3f23f68b6df766e2f9db2808d5e2518c98e6fe
TLSH
T129B0125084026B02C00712F8228304983154EF109745230553F0B971DA371904419151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58aad1.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58aad1.TMP
Size 96B
SHA256 75be7903a3cd243cc7022accc21ec967e6fbfb9d78bbebd0dbd4abc07080f8d9
MD5 b566b9186b2c736b3b137c91a497fc37
SHA1 626e34977ebdc30e1cf74ad997db900bde3c3b0c
SHA512 0b9d2dca4d42fd8660f036576e49e7f940448f2bddd579d4470b2883c3acbed9e33ea3833ba450314ef7e25390f31d118e3cb03a041fa2a8521833e7e712cd3e
TLSH
T143B02220C202E202C02203F02EC28AE832B0CF20C2038B03C2E02B23CC20E2080238E0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 6b1dcc2e2da63be1707c3c76fd34616cee4ccfc471c750c6e03fb6768bed3902
MD5 705625a0137a2272fbd11439bc0615de
SHA1 b73af79e7a5998fa53a120cc0773fd6e3db0cb00
SHA512 6d3970bcaefc3cd18ef515f58a35aa7ae2e1cd2a874b1fb1cbb092bf9e2704d719b6c1418edbd142f6ed58d9c2f5d580bd96d218243d80792e21aacfd73b5c69
SSDEEP 1536:h9TMcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE:XQ3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1219302BA8D2A59F399BE5692769E7809CE12130E716FA8CC716C534C21D41C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 126KB
SHA256 6448ad3231d087fdea9f90b2c3e39d179a8156c04173b38a488e6f2e8d3a5632
MD5 200509ecc5f9b7e6ea55ddb9a915f2a2
SHA1 38cc1da55804842604739a2e5c0aedc16c83d92a
SHA512 170763f255e5c1cd38a136fd5115e735f2bbdd33858e6904655805510742d8abbe90e2bd34c519939efc464d4d88332901a635af4f832859f2140e3927f2d036
SSDEEP 3072:RhW/w/nq9x3Qw/xLANk0mUW5GmRntSFCjEENl:RY/qngxrOk0HOGm/SFyEEL
TLSH
T14DC302FA9D2E5AF38A3F53D6395A280CCE12570A716F9DCCA05C174920D53C82F62E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 6942a86f0598bf7cea4672ec352f624fa2e136ed9dd5f00991f60030e136083d
MD5 9eb94883a1baef0d7f1ae5d1c3dbea5d
SHA1 840acc22a77c92fe74ec78bd10537b73de0d226f
SHA512 4efa9cd930e56b273015e2410a205dee562631907cd74339d647b34d181c481e06e3ca841921e36fc4f4d7e7fc385fe1b922272a7d4443dc06800b65e0a2e366
SSDEEP 1536:gocYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3b:93Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T1429302BA5E2A46E7957E46D176AE7809CE12130D70AFA8CC31AC539C21D01C92B73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 6cf3eaba267bf652f1d75e32d632a75f2c4e99c2c5af000e1d867109ab6ee66c
MD5 c75b246928240d3df3fb825808d1e158
SHA1 296179810770a8a4c94c900e3c5e3003be746f03
SHA512 594aa47f4c62c10087aadbe51d18a3e0e821a2fb46362ceeb7e15dd10349a50b100e6314ffe62d9bce6c0b51806d8bd107a23de40815594d025bc947ebd1acd8
SSDEEP 1536:JnDcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEL:J3Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T10B9312BA5E2A59E795BE46D1766E340ACD12130D719FA8CC726C539C21D01C82B73E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 c0b1c31ed9f1221cd128939fa5bac27389ace005cd55f80f5adaadd24d8effbb
MD5 4e69dae74f40a7bef00447f472801acd
SHA1 b47dc1c64ee3b781617ee81b31e965015292ea81
SHA512 35b46a91306692a5d80b92aca406e976bb045542d147147669b5dc087b9ca5675c2027fbe4c3556d90ae26e73d68f4e1feda5df5caecfaee1091439c0f5e8207
SSDEEP 1536:gnDcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEL:43Qw/xLANk0mUW5GmRntSFCjEENl
TLSH
T11B9312BA5E2A59E795BE46D1766E740ACD12130D719FA8CC726C139C21D01C82B73E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download