hxxp://genomeapp[.]co[.]uk

Analysis

user interaction
yes
max time kernel
599s
max time network
586s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/04/2026, 14:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://genomeapp.co.uk
Sample260430-r81cssay8n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1168	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134220343677492941"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
4128	chrome.exe
4128	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe
Token: SeShutdownPrivilege	2956	chrome.exe
Token: SeCreatePagefilePrivilege	2956	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe
2956	chrome.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 2956 wrote to memory of 560	2956	chrome.exe	85
PID 2956 wrote to memory of 3788	2956	chrome.exe	86
PID 2956 wrote to memory of 3788	2956	chrome.exe	86
PID 2956 wrote to memory of 1168	2956	chrome.exe	87
PID 2956 wrote to memory of 2504	2956	chrome.exe	88
PID 2956 wrote to memory of 2504	2956	chrome.exe	88
PID 2956 wrote to memory of 4868	2956	chrome.exe	90
PID 2956 wrote to memory of 3260	2956	chrome.exe	91
PID 2956 wrote to memory of 4868	2956	chrome.exe	90
PID 2956 wrote to memory of 3260	2956	chrome.exe	91
PID 2956 wrote to memory of 3872	2956	chrome.exe	92
PID 2956 wrote to memory of 3872	2956	chrome.exe	92
PID 2956 wrote to memory of 3472	2956	chrome.exe	93
PID 2956 wrote to memory of 3472	2956	chrome.exe	93
PID 2956 wrote to memory of 4576	2956	chrome.exe	94
PID 2956 wrote to memory of 2852	2956	chrome.exe	102
PID 2956 wrote to memory of 2852	2956	chrome.exe	102
PID 2956 wrote to memory of 4560	2956	chrome.exe	111
PID 2956 wrote to memory of 4304	2956	chrome.exe	112
PID 2956 wrote to memory of 1516	2956	chrome.exe	113
PID 2956 wrote to memory of 5076	2956	chrome.exe	115
PID 2956 wrote to memory of 5076	2956	chrome.exe	115
PID 2956 wrote to memory of 544	2956	chrome.exe	116
PID 2956 wrote to memory of 544	2956	chrome.exe	116
PID 2956 wrote to memory of 1812	2956	chrome.exe	117
PID 2956 wrote to memory of 1812	2956	chrome.exe	117
PID 2956 wrote to memory of 1864	2956	chrome.exe	118
PID 2956 wrote to memory of 1864	2956	chrome.exe	118
PID 2956 wrote to memory of 4128	2956	chrome.exe	119
PID 2956 wrote to memory of 4332	2956	chrome.exe	120
PID 2956 wrote to memory of 4332	2956	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://genomeapp.co.uk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa8434c728,0x7ffa8434c734,0x7ffa8434c740
  2⤵
  PID:560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,7460488883580403896,714876730844958480,262144 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1488,i,13821693546969530895,14359211860648550894,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2356,i,6977546670722541188,15447472254740889389,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3088,i,4349054776534681239,7377299831401751631,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3116,i,17162827648432236038,2948532349544787628,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4292,i,17610079217204569028,723794606439417803,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4464 /prefetch:2
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4672,i,3117996637849205634,7338511104926579053,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,9799144931278708788,14465951644186533362,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5560,i,10109391513597159766,6119739921719239751,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,18115566035216854947,15312928245826530372,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,15318953480735863804,12350554986395128837,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,12149828736842822602,14566482409450793448,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:1516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=1072,i,3526127852567211449,2183272427167103106,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5752,i,9567502112281106984,14082627645828520123,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=tracing.mojom.TracingService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3144,i,7636868173544886299,16677601980820855836,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3128 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5604,i,17182428138228597174,17233160618731021640,2097152 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6164,i,16239155774809324171,6062546234990463470,262144 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6172,i,774715584312300774,17686116300623960317,524288 --field-trial-handle=1980,i,12670612748810827388,9691708620473372335,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:4332

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3964

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6b2da474-a427-4789-9299-87cfb3da4fca.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6b2da474-a427-4789-9299-87cfb3da4fca.tmp
Size 13KB
SHA256 db2a6ec4db2e1a3617e90acda2016ecb1e755b912e93e4b48f07ce94a9b91e02
MD5 9bac6041d1a53b77282b872ea502e3b5
SHA1 26f8859b1340237e0c0775b66a4d77163f65cb50
SHA512 f015a43dda2b5b4075546eb170f5d4a0ba332c33514f9936566f3a598105df42ab1567528ac6a469a78ed4288694e2e3cd96ccc81a2d8f5d1ec6daadc20e83f1
SSDEEP 192:7R1tLO8eOQ/YIVFGAmv7ZpIpAPRp2il9wHsb+WNnLfApx2s54SUGV5MSVyIsnAUp:7R1tSmunVhSEUX1OwTa20yk5MSe
TLSH
T11952C52EA918B97B9CC7D32AF9617F67DBE6102221942E84D6FC862C04E75DC721341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3e0eb65746f8547a4ba167574f0469dcaf00ca2bde641b91bca976d7dce29d12
MD5 af0e2471d3bc1feda94643ca968a3a25
SHA1 1d013ff1025bf88b35009874e68570415ee35e8a
SHA512 ff9196f125b9905181ab43011f0fb4f210ee5e5c620414f3a2cc2afb576002fc0ed6063d29131886a7c143c218ea704ec6b7b5c4dcb3262d38ab4cf3d8c60494
TLSH
T17CE02BA6C861AC371CFD671C64A41747EA0153162B40984B3B3D820D8FB06374646C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001
Size 24KB
SHA256 234cc0266cb04384641a3a67da98abe3e39e7b56faa8fe23762a1e3eb5c86ca0
MD5 506cbe489e19c6532e8642c1a9d7b303
SHA1 42aa5063ae89db24c1b1895ea8342d8fc6cfbc03
SHA512 fc7c319d9da02d691ecd29abf6ffaeb61f0d4da14456152aefaf71f6308e7e4ff277288549b3e8f01a718c902c17a689318e7048915ea6e9f6904cc7a1388c79
SSDEEP 384:6Owoc/aMHt7St3hSFIsa5tt5fpyM8ALDRdDoysiSx/8iDsZ4qj+VvD5O7R:6y8ltuPCI5fpykDro5zqiDsZJqVvDA7R
TLSH
T113B2D04EFB0F0B1DA49DED4C148F9E5232FD99F5D1A5A0041F33E29345111A0CA8BADB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002
Size 53KB
SHA256 bf00e9659bf46fc65aaac5f063a7c51f7610e0af4e360d0a98bda46e3eb56bdc
MD5 e53709f8c2a693f39da4e6ee413e6455
SHA1 2ebee2687876a0fda40f01e882d1d4a969c53153
SHA512 2ce009c42289b37a77b563b7293a075d1b12ebc253d5e036539e057ea18bcb8d50182658f0b46ce543b3b8258b05160b474e612ca2efd7377bd71233687ab9d1
SSDEEP 1536:zxPga+VmShTOfPS57TY9G2DNCgmafnASx3MEs:FPg/Vxhz7wG25HYSB1s
TLSH
T1CD33029B5F0014FA949B1C3FF2D4006C0BCA8DF71096BBA8159E64EC67E52D46CE86BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000003
Size 45KB
SHA256 a416b54e8afd1b48a9e8306a15073f5a003ec6a1c388604012ebd078ad7f1794
MD5 99b2513e0d9e4f9ca5805b844673a4f8
SHA1 deae2e55a0bb2c39bb83633ae93eba505515b9ac
SHA512 77af309d5c51a3099c48ede35347a7d4317701b4eb0e8094e9c55221a27001039c1303df1e14a955f3dea94dd465635a92b648d1d17d56a7ecae3ffe79d6f87d
SSDEEP 768:VuI80KfePtfFHSY8zUSXfCeWzIynEXbmvpEpdCGRndeu6ToAZoz+k27PjfCmFnuX:f86PtbSZykmxGdCid1KRZFtjfOmiJ
TLSH
T1DC23F1C951AC51A3B74B0752FAE6DCCB6878534800B31ADF66D7069F066F30839AC81D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
Size 18KB
SHA256 5b2115342215493bf798cce80bf28c7b361b09d48bf453e49a74e53003078467
MD5 1bdb35f3d85e65207a1ef27fd5859c05
SHA1 a86135d613ac351b0e0287a7a4bf3b1c7099b383
SHA512 9901067352a15b0866c22a8c28b0b9ed2642e5930718808d8c6711d66d03c23c895981de8f6f33a52252570c6d5a8512298d16b174f04654e4c110d6a0feb5eb
SSDEEP 384:fFbJZwQy14O5WmFnfD7VtkutM+JTFYvvqZhmIaMMhyOHM:ftJZwQyb5WmF1tkxQCv//vHM
TLSH
T1F282D16B363511F981E6CA043064F3964D3CFF90F8BBB3896239128951CA2B9D6665C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 21KB
SHA256 b9d66d1708156f765ada51939bc24ed259dafa69eb631b36e443680fe9e15879
MD5 10a07810f28f8ff9a071a88dc2255bbb
SHA1 0a5c6fbc071198f9f844e882523c9c2e695cbd2d
SHA512 de9f6ddb50ee3830baeb1e1f6bb4c9d10d10bbc32022474cd3d15ce0de1f8f3f8abece8d30a58fbfd0b1a7c8d2f1e9bc4ad2f11e73ce712e6894ff09c7d76680
SSDEEP 384:dBqp4Xkc4lyUzhkLmg9DIKNEhDB+xFFR8njA5mhD0jDn1fPesWEaAG92BTIYrMm6:dC4Xkc4lyzLmeHNEJBOFRijAS017WzA0
TLSH
T199A2E1D301E57BD0C6A0BE7E54C9305C2E7985BA3D7764028D19418C68828F2706CAFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 20KB
SHA256 a98a682b608289bd5d0cbffa4eb9e9dbdc9007b73d24a18a0e0c8baae8d77dae
MD5 fb62f6812ba2f1631b5386191c266208
SHA1 1394bcdbd5ba24c75d5947dc0991484fff658387
SHA512 294a6f594cd987363dcb2f3b7709268f8a87b9e9ed49b4156e3cbd3e7a8e6dced54804c192c4e64077f765bc482e83eed24d3360ca342fa35cfb690d151562fd
SSDEEP 384:gh0WqR/oqHdzmxIOHlIJgCOjGzaTGK2HtQWPzjgjIlRQEqPKS:pWqRgqQFIJ0yzEG5HtQWPg0h2KS
TLSH
T19792E189303D36DDDAACBEBD6A7F03567C0418586644394A06DCF9E4CDB165EE3708E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 21KB
SHA256 299f10a52fe1423dd5579ff7e83db8dbea312f1e924f3e06e55839286b4d1c1d
MD5 57cc7a45b4db7ff1cb3d012fca4820aa
SHA1 bea1e5891503e07388ac1d5b17919d179edd62d6
SHA512 6140daf035dba2acac7947d3452a0df691c91fec38c0196826a15ae6958cdbbf43beda0315442e2281c307cc70384596143bf297155cdfa9f20b1832fb798126
SSDEEP 384:LRuzvUIMiUGA9SREHAJQVjq+/GjDTf/JUtt2fsRL4SCv+SdmyThwYGHltko:YzUIz7c6yGPT3JUT2fsRk/vJD/Cn3
TLSH
T1BDA2E1A6781BBC72F11297307EE583B42584F25437CD3F3096E2E95C4AC06CA58A228F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 21KB
SHA256 5bcc3aa180e7f26f643cd5b2621cd7c2de193d0661d913a94afd3d4881a7a34b
MD5 55cfeb5304f00ff33469dc76a3b30758
SHA1 88d702fdaae15f269299c04f979b674d18c6cf18
SHA512 ce7ac3fd8eb49ee70d47ce174b1a81478079c831502a76b003ada4d6ce8d0bbb1adffb1b34f3e34026757148dfd9296bb85c312219da6e09c74520e0c4998a1e
SSDEEP 384:wTUaaxgF1D9PaaN75l/bEZTZ2EcB32774ZUqOa/6obeu1xrn9jiSnVVpBk:wTUhM1DLN75tbEZVu8cZUvU6oqu19n92
TLSH
T1ECA2E1ECE2974ADE9432B474C3401756163814E57688FE45FEAD36D2E020EADD3C2ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 21KB
SHA256 425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371
MD5 4279528ce0e7dc28919e6f8ce5f0eaa5
SHA1 a0bec563643727d81bf21d0acec08227d9269da4
SHA512 2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507
SSDEEP 384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87
TLSH
T10AA2E187B3EAA46D5787B931FA0A1900B8FE73F65D27DA6484E087C9A1456C48C3DD3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 28KB
SHA256 1143017b52b9804c4ff16c81c6f12c8238da1632d89e570a4fd8984845f6631b
MD5 3038cd59cbea4a7257100a0855225e26
SHA1 12f202d196e09323f1ee235aead393408fe9caeb
SHA512 3c6887773fe0d132e4096cd0809072564a1741d03c58d8c878d798c39f011c561f9a950f422de91f946a3d9a0db1fc807433601ad5970651abc459409856667e
SSDEEP 768:K+Vob5U94FQKM9bB4oGxa0TgdDzOMrcO/pJpkMYq:K+Vobk4vM9PGJf+npx
TLSH
T1E1D2F104D0D050DF6E0DCAC8D7B251A56F9D19F39E09FA43DF8CA6045A213AADBD0DA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 744B
SHA256 90a658445c6ddbfca91af31a8f7ae465dd8b4b67b65987e7dbbe21d0b59e6a81
MD5 f9d6de84934da3e107e772ca38b45a8c
SHA1 dceb864ec60636a6f76eefa8277f9ee78f509aba
SHA512 61c0a27496ac2d5b4db17c14c15bb5010bd37b359bee603542ea5dbf98a549c29989c8a5e3c8e8463cea972fdf0535d33ba162934d34ed8fdd535002a9615b9e
TLSH
T177012DB999E1B169FF0E0FF4964D4FC72060CCC600B30B23AE0CD58A68BA1CCF506284
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 0114bf3f2ee6938559ab2252287606f4d60ecdb9ed33ac9232d461eb0a2313a3
MD5 30e77a01a5a6353456cc054ef56a3eeb
SHA1 dcf7eac688713904547d6f9f5494ca642f83a843
SHA512 d55688465410cb7bec7cb2b3e7822c307caf4f860721715912ab4d062a80ddcebdd2232193916a474b8e7d975f0c96c25f27edd3391a08099f0667d4647d7b72
TLSH
T1CFF0261CABC13134CF8419B571404F8F1330867C68710F23DD28619BA8974EF04010CC
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 318B
SHA256 63b8bfd458042055488adec93549d2e903f0b867e02c2b54cde5bd5d9ffeadc2
MD5 2417619052f2d3383b7fdc987a82ff53
SHA1 93e511405f7cb7b89052e27c55e2c00be9799dd8
SHA512 03fcc836dca7bce5835805348fd42df246f7257323f9d89f56a9baf954c2d3a7c69c2072e33278638ce1842d0e42b7c4aacfd8268d7f5e0a2e10b31d80e831df
TLSH
T121E0E7A7C2C484FE460403F457156A6BCF7E0904432C3C6695E8BF1F97D38B8411454B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 818B
SHA256 7a6bfd1c800ca5ec01760bf5f1936001bbb63c09c27c99cc80b5514f0505f83b
MD5 79975e92b74821464061ea0dd3336ea9
SHA1 afd8b621b047408fde5640512e8489583032715f
SHA512 5de132921a5ff9266ee567e46ea860fc46c683abb688e72d996e19aade50abc1df8bf51ba4fbfe98500e496e09e11535dac3a95b6631fc1533bbf62779d3714d
TLSH
T14501B1F3C7D8827D891506F4B715391BDE2E091843393C6598D49F5F97E2475821468F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 84B
SHA256 712196693e3527ac1131831f1a2108b6c0e5c68967b26d51a452611cdfb86e0c
MD5 32b9dc9cc81d0682e78627c873fdd651
SHA1 46c486386d3e153c3e9b11d54cb52cf0064b71cf
SHA512 f18bc37f8b72411548da247aa1394cc5ac03c3bbd98e82eb8ba290ef239ef5b8625cf4835bd41ce7c52766d0bc3bfe9150dd22dbf62f0f05992ddde5fbfdc811
TLSH
T154A0121490405CFB0308835504146463C3F50002421848A91634318D019209D0004403
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 22B
SHA256 6b40f4ae548688a472be3ca0c1b08ecf520b31e706fec0f9793b4666134eba06
MD5 3bb76ec23c5506830ead56540e06159f
SHA1 94695e47d907e559e91e677cec4eb763dc0c5ca9
SHA512 307f9bd06ca5ee753acdc450cf1599dfc8ed080d9a1b19d752dd9b7950377a5b04e44d374f12ed76abd74961c2b1f8ad6c93e4663ea77f5d6e066570c1aa6bad
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2091370600f930c2897bcf5bf8a54166f57fbddc76668fd633a8eddac756968a
MD5 82a4ba4510f62ec2ddc1a03a8230679c
SHA1 24f319ee65150a43ab4c700429627c42ccde43bb
SHA512 5055f57d30b94e11092108d7063b68da3a6453df0728e5bd8e3989175daa61b4c858bb5acf5e51aef713450a04807ff77718c312a38201800b21dd0a3cf0258b
SSDEEP 192:7R1ti8Si/YIVFGAOv7ZpIpAPRp2il9wHsb+WNnLfApx2s54SUGV5MSVyIsnAUge:7R1tiynVhqEUX1OwTa20yk5MSe
TLSH
T1C152C62EA918B97B9CD7D329F9617F27DBE6102225943E84D6FC862C04E75DC321341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 64KB
SHA256 2403daa18649cf766deff4d1048ddcf9df9f660252b0141b20a1399462af796b
MD5 777074b10c71451b5428c12767eca74e
SHA1 b2bb3e997a59512a8b7492b54a5f055689e16f94
SHA512 9e5580d16ebd4cacd8e650ca5723d482765d0cf2a30a636f0ff6f83c7feff9b44b92293b9e2f59f8b00d7bd1b4f2b9c6f5ae9338a4caec07766a7695606801da
SSDEEP 768:/tiKX3gwiD11n7zJrSagHrIGaFLRPGIwoPsz3GGOwq65Mq:liKwPOlWSqW
TLSH
T1B6533429E281DC7BDBC88D1F77786E31B196809D4EE3388AA4C8C71550B2D7C5BB3619
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 64KB
SHA256 46b8a73372fe13da319b4a8bdb5d1b2fb6d0cbab1575d5427925cd1ac32e1322
MD5 bfaddc81ecf1d5e85af0854521e975cc
SHA1 69b88940851b52425e7394995cd0fc5ed2fee9c1
SHA512 7c48a4506326931b42914416b47a29a1996f93abf4a31513b92d9bdbdbcd6dfdf66472aa1dbd66c790dc795e0d0178d033c833b8b131b88c11194e9d50bb7943
SSDEEP 768:/tSKl3gwiD11n7zJrSagHrIGaFLRPGIwoPsz3L3OwXCp5Mq:lSKuPOlb9XC9
TLSH
T166533329E281DC7BDBC48D1F77786E31B196809D4EE3388AA4C8C71550B2D7C5BB361A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 56ebf4b6c90ebd6c69c1bd92dd5495136f4cb865dad233eef6ff2550e7c20858
MD5 c3d11ce68eb4a7653db4173198d026f0
SHA1 dad48fa4251459105c3809a95005028cb2baa436
SHA512 255c0a06e0fbcfee98ee1811aa2142d321813eaf816c9437198b0d0b64776b8f43e1edc13c2c2e2859dd4a59d7294b2a8615c5b94de5be677f763d634b5c97e9
SSDEEP 192:7R1tLO8ei/YIVFGAmv7ZpIpAPRp2il9wHsb+WNnLfApx2h54SUGZ5MSVyIsnAUgE:7R1tS0nVhSEUX1OwTa2nyQ5MSE
TLSH
T10962C72EA914B97BDCC7D32AF9617F67D7E6102221942E84D6FC8A2C04E75DC321341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7085bd26a00ea25f436317507845db76624f1e305c5ea5c1633f0710fb2525e9
MD5 6fedf8e0cda28604a18bc21b3b3a9b01
SHA1 6e736322a4f9228617a8d1dccd80d010032b80ff
SHA512 7c43690cde2a8678a5465e416e0cead981d993013a68eccf60d0f0f8520df5a31229546fee29023f6dada5f06f5e8901b2628e5ccb2a58fa5dcaf82771739eca
SSDEEP 384:UO62joO6z7KxkXqKf/pUZNCgVLH2HfgslBr7pLuLcifKO6/XODoO6P+ErU3f6HGy:UO62oO6z7KxkXqKf/pUZNCgVLH2Hfgsr
TLSH
T18972E9676C4C9E770F94CACCD816BE4FADB5010B65D9886843FA982903D4BDB11462FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1d950bcc6572597315a3564fb3ba281d4e38418eb41321009103efa63da43807
MD5 9ac162fe8f0ba8daf0d8203b7e30e406
SHA1 73bfeff90249f9e82cb44ed2cefc0b0175dcecd6
SHA512 bcfbe38981be3ad692484a3e436693337dc2cf504a4ded835a602fecfb9479adf616d997831dae7a1e8662ed1c763ed4ffc1e220990d1e92f5bceea33284b2c6
TLSH
T1A1B01210C0025591CCA303B011865C8935145F20970A1307D7E07AB1D8261EAD114150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a97a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a97a.TMP
Size 96B
SHA256 1c82d2b50e30c0e2a1791acd7ff843c1a48fbea38377a0730ee70b240418b513
MD5 3df15b124dc6ab8705157433768274c5
SHA1 b346cbdcbbc8668886d6657c8da62fe569741507
SHA512 29cf7af1488843056ecdf684a81f8e589c14971e7505a143303fcafa97154594dc6b8e277ff31a77dbeedb7ca428ebdf632d7d6e34da8c8a357aef36441d315d
TLSH
T16EB02200C0822202C00383F023ABB8C83020EF20EA030A03CAE00E22CCA033A00280B8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 c0efa4f594f1bc816db8fbbead63aee230ba2662d87a44b53eeba7bfc7bcc583
MD5 fd3324f361cab024b678810c446cf88d
SHA1 a0d4c4bd5cce13090817ad0b0dd9283fb42b1c54
SHA512 1ad4a9e5ccb5dd5925bc5cc5d55f6c9ef4348a2d63be129e16aed004cafa1d605a50b2e9dfc4feaea753bfa2a6ee367174425b0fc201ee7dfe4cd7d8b6fd983d
SSDEEP 1536:fb9XycYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9g:j9C3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1BC9302BA9E1A4AF799BD5A9172AE3909CE12230D715F788C715C538C21D41CC2B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 4f0aeafa985e5985f81635e92209740d13e9e4d3fd59bcdaa4040783f916d1f0
MD5 22d6fa1a9d7526c0c8e04f80a67987e8
SHA1 ab770290710b32e0bbf1d9976447d8996597394e
SHA512 3ff8eb3c1a082abf92f0b078f17bacee318b8f1c5ad33c31093a26486ad76115cc977fba885a1c25de56c166ec891b66d3105b0f75bfcccec642e8dcbbc600f4
SSDEEP 1536:P2QcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE+:p3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1469302BA9E164AF799BD4A9172AE780ACD12230D309F69CC725C538C21C41CD2B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 f564838e8b8a3d1694d9a1257912858ec097a6ab3aa04adbc0a96c69d5d6517b
MD5 fac2754f3f93a9c0380c0d7257b50d86
SHA1 6388ffacefe69dc1a77db171d488f9556cb6cf5c
SHA512 4cdd6c40eefc257ffc1f34983dab4782dd88aa686c1f7f4b61863db7327570108988209ab6c377ff4d2725027a249d955cd680c994086d74992f325095dfa4e3
SSDEEP 3072:uljieZVpaXC73Qw/xLANk0mUW5GmRntSFCjEEN4:GjieAC7rOk0HOGm/SFyEE+
TLSH
T109D31379C8570CFBC9BC4B8131AE6806CE36130EB65F2DDA756D628D25A11C80757EB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 6c086ad4bb161ea0964e2aa4b7ebd46effec43cf832d82730063e8716e9b6bfc
MD5 b78f88a8570d09d44b1da8259d80bb73
SHA1 319112e4fe84702fe4f0fdfd9ab5151c158075d7
SHA512 0ed14818852b3a5c366bd56f8a7d61cdb7206995a9617bf5c94e3511f40c392402160c028c2056e8d1d484ebc9f0e62f577ac7e68293803e8533558a817e23cc
SSDEEP 1536:Y8cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3u:33Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T16C9302BA8E174AEB957D4A8176AE7909CE12230D70AFB9CC315C539C21D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 bb5e861b55dfd88c2da560e92c00e726f2aa5941a5cbc01391fb11ef9ee7d450
MD5 c351bd1a2a94fb91ea0f0c49127f9981
SHA1 4af791e1752a7585453ef92a6b50599fb3c153d4
SHA512 ee61e0328d7fc1be18ea7c6a0f68e54489e555b2185ec4bcc0c3fc5558e8aedcc421c51e80e612a691081d6b551e2ee2b43050f8dac022ca910b679e4d451ebb
SSDEEP 1536:Y2QcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE+:y3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1319302BA9E164AF799BD4A9172AE780ACD12230D309F79CC725C539C21C41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 2473fa013988cce6d7b279c3883d80318e95e5c98ba719f595fb01de32e23bfd
MD5 0b3dfc76340938a48909d149f7a3b907
SHA1 0f962dd79cd37941888ee390a7f3379e7f902d79
SHA512 25165a1278e9cdb90db16ead80c420788998e11d6053e652ef82781393ed6c5a501c554f71b7a5ac063f7dacec6e64b169453e413d01ca4f7f96ea524850cca8
SSDEEP 1536:Pb9XycYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9g:z9C3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1449302BA9E164AF799BD5A9172AE3909CE12230E716F788C715C538C21D41CC2B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download