hxxps://jnhhgamingroblox[.]com/v/3JRbb9tbgCk

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/05/2026, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://jnhhgamingroblox.com/v/3JRbb9tbgCk
Sample260503-dk8sdaet9j

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
163	1804	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1804	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222511402234388"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-745935970-1373868228-562466063-1000\{E0A8FD48-043B-4DD6-BF4E-A545597872DE}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
1352	chrome.exe
1352	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe
Token: SeShutdownPrivilege	4396	chrome.exe
Token: SeCreatePagefilePrivilege	4396	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe
4396	chrome.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4396 wrote to memory of 3804	4396	chrome.exe	86
PID 4396 wrote to memory of 1804	4396	chrome.exe	87
PID 4396 wrote to memory of 2140	4396	chrome.exe	88
PID 4396 wrote to memory of 2140	4396	chrome.exe	88
PID 4396 wrote to memory of 3044	4396	chrome.exe	89
PID 4396 wrote to memory of 3044	4396	chrome.exe	89
PID 4396 wrote to memory of 4864	4396	chrome.exe	90
PID 4396 wrote to memory of 2404	4396	chrome.exe	91
PID 4396 wrote to memory of 4864	4396	chrome.exe	90
PID 4396 wrote to memory of 2404	4396	chrome.exe	91
PID 4396 wrote to memory of 4780	4396	chrome.exe	92
PID 4396 wrote to memory of 4780	4396	chrome.exe	92
PID 4396 wrote to memory of 3616	4396	chrome.exe	94
PID 4396 wrote to memory of 3616	4396	chrome.exe	94
PID 4396 wrote to memory of 1388	4396	chrome.exe	95
PID 4396 wrote to memory of 1388	4396	chrome.exe	95
PID 4396 wrote to memory of 3604	4396	chrome.exe	97
PID 4396 wrote to memory of 1412	4396	chrome.exe	96
PID 4396 wrote to memory of 3604	4396	chrome.exe	97
PID 4396 wrote to memory of 3652	4396	chrome.exe	98
PID 4396 wrote to memory of 224	4396	chrome.exe	101
PID 4396 wrote to memory of 224	4396	chrome.exe	101
PID 4396 wrote to memory of 4448	4396	chrome.exe	102
PID 4396 wrote to memory of 4448	4396	chrome.exe	102
PID 4396 wrote to memory of 4476	4396	chrome.exe	103
PID 4396 wrote to memory of 4476	4396	chrome.exe	103
PID 4396 wrote to memory of 4384	4396	chrome.exe	104
PID 4396 wrote to memory of 4384	4396	chrome.exe	104
PID 4396 wrote to memory of 1756	4396	chrome.exe	112
PID 4396 wrote to memory of 2432	4396	chrome.exe	113
PID 4396 wrote to memory of 4872	4396	chrome.exe	114
PID 4396 wrote to memory of 5004	4396	chrome.exe	116
PID 4396 wrote to memory of 1352	4396	chrome.exe	117

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://jnhhgamingroblox.com/v/3JRbb9tbgCk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9fc6cc728,0x7ff9fc6cc734,0x7ff9fc6cc740
  2⤵
  PID:3804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,3190381228674321007,17489288912489202370,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:1804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,7497006618987763321,8850298417878742147,262144 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,10884131930328290271,7188371509383916919,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3224,i,3948661742625884844,17445717778846147668,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3232,i,18193101934303461116,6025308501631315454,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4292,i,756022219933789673,16491678672899505314,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,18038257826532568330,17648945423994201862,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4864,i,7093788620696693511,5877499527520979632,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5008,i,16175662165493948600,14509874411964925579,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5024,i,17793267572799854048,10322878664884496768,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,8273062066638204886,14752148877050377041,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5852,i,12756090953245066169,9938148290616971018,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5992,i,17102664047508586783,4548929625539538658,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6024,i,8871983291970923935,13485372338580532657,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6280 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6412,i,9471896540382927495,2693423508816246925,2097152 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6180,i,2710277166387779782,18172383598580824589,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6200,i,15224425444286106,17030649354904346904,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6040,i,2682802003996381602,9332908365164830966,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,14340774322494708926,6696991941808064477,524288 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4944,i,9299900957508936372,3263498915444301547,262144 --field-trial-handle=2132,i,11519948952479897415,12373322940027026264,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1352

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4972

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 27548ebb9fb55be3cefed983e4a9aa53503e8e53fd8c43eb713f732313ec80c3
MD5 fc89b77e4bfa5bbe30b6d6899635ffc0
SHA1 d5c001dd85095157d9282e515ba621e86eec9ab9
SHA512 da205d60db767aee21addd8f3125a38310a81162d426027c5837e3ffb3083d75b96b4aa6eb2a899c2694074645b4dfddbae9a08c99383029db5c42254f3c5413
TLSH
T125E02B9AC921AC2708FE07196084A745EB15036B2741591F763C820C8FB067A528681C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b422de1b23041c733e7bb9af4c2fb76447215a6c215c01df8e4fab8616cf99b0
MD5 e995b792ad403b3a115412f4e969f634
SHA1 712fcc44e015e62db7a6f6ac2ce646914cabdb00
SHA512 c205ed9f306cbd6d287dfd5848e731c4f910dcda81e27867277d9666c959bcde998546b6b244c1b6731297afb14d0ff21307641bebdb814c146c8c0397d068b5
TLSH
T13F31635D64D8306ECF7C2D34D99A4C4536BDBE0FC83B6B579C582CA84703AE849386C4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 65ebdd3ac52d49862394e6cc24890f9a990b4cf8793d289cf55d9a2e8f32aa73
MD5 c47756b7fb9f176463a84d5d0ab3f63b
SHA1 d7dd0cb69cc77e689ed9b60fd1f5f8d060444271
SHA512 81c37b60e750787733f2228a5bc55da897d0ecb82ce3c9765d5152acd544c3095ee49919d790e80c329ad5247adbf72bb39c9d05d398a130e83a589544d7255c
SSDEEP 384:Du3wGjosNe+0Cqz67UkSLaIaEg7PJk4XwFz4HGqhTGw18tCrxrrJotrIu6YYV9Y7:Glr21b
TLSH
T117628CF7C3E8863E992555F4A6146E1FCE5E1928832C3C56C5D8EF4BA3F1471E28068E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1a62911473aed5a774254b3a08d7003770b9b5632095a7ef689797531fca6015
MD5 301314de8027d1256d0af5134843a7c0
SHA1 c128c36280a99338d29ab024ced35cf3c258526b
SHA512 d8eb22318ce4ab7ff9efd814d3e83e0a00665ba5a6e104fa06dae0afcc8a63fb6187464cb449102e91784eb5cb7f27e2f217306448b1d163e0ebc85702af633e
SSDEEP 192:WRRbq67WPFv7bpAPRp2oq9+Hsb+WNnwA46wu2yGyp9j+VyIsnAUge:WRRby1HUXqEwb4I2tyH2e
TLSH
T12942D82AAA187A7B9CDFC21EF9217A17D7F1102171942E88E6FCC52C24D79CD231742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 78a3671778178acccd2622bde5a56e59f15d16cc7ff43a872ef0852a64c28693
MD5 56ae6d944a0c061170574832eabfee8c
SHA1 53406381cb52fcccde4573a7817e6e67d09a0c4d
SHA512 4674f36648048e258f5042fd910c271ed41d92b6f83153dc63ce4032ab7beafa8c7e5a0b0d64a8f895aa8d8e0455278b53f739f73fb17e890ffd39cb8921d828
SSDEEP 192:WRRnq67WPrv7bpAPRp2ZT01XyE+P9+Hsb+WNOY4wA46V7ih+s29Gyp9Q+VyIsnAI:WRRnyTHUXAEwi4MY2Uyk2E
TLSH
T15352B85AA9542A7BDCDBC229F911BB17E7F12021A1C41E88E6FCC92C24D7ADD3317427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 18b0a63786f6304cc6f2d478471e749c48fb86d2a3b44221af4a45528bd8bfbb
MD5 cfe58fadb62506f46076591a777d9923
SHA1 68c78f870423308f6a87f2f882e31757cb50c9f3
SHA512 82edcbf9b603e28116edaee84414f4a71eff0f5ece96bea5c6743d8065a42d690d30e1e9cc4b06b1f058c18a4e195d8814bd82a11525d9e77b89d2a5757dea24
SSDEEP 192:WRRbq67WPyv7bpAPRp281XyO+P9+Hsb+WNOY4wA46V7eFGyp9j+VyIsnAUge:WRRbyeHUXEEwi4MesyH2e
TLSH
T19352C81AA9583A7B9CDBC229F921BB17D7F1202171941E88E6FCC92C24D79DD3317427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4c5dbe3f3071c1cdd70e39a99dd2a8e7a0233b08f2fef9e58bef03d6b9f0f954
MD5 eaf45e095eaf8d2e1b455626d5895959
SHA1 23bbb40f8390c77932f41805e60e5023c08cbcfb
SHA512 92ecc61b66421f057e483c277097699444f9b664b973b2ed4406a72d4c026914714c5b5c5496330675ccc8e112b23772dfe4e83882fbc0b2de5ba584e72837e6
SSDEEP 384:Wcji97KxkXqKf/pUZNCgVLH2HfgslE27pLuLcifU1XODid+ErU3+NHGSdTFO:Wwi97KxkXqKf/pUZNCgVLH2Hfgs227pA
TLSH
T1EB72F8676C0C9E3B4F98C68CD9267F4FACB5014B65EA885493FA982903D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\635b4ba12a53eb6a424970a60aaf590f96d3a879\e491989c-d336-420d-ba17-cd6c9a56d965\index-dir\the-real-index
Size 96B
SHA256 75f2453ec97e45f476885b3d56824cf2557720998a11d4da0a2b9ef761ecb7cd
MD5 338db443d4003eb967a697bf7a924127
SHA1 2cdfcd5991206dabba1121894ed908cf8f5c09a2
SHA512 7472cd9a3df4e8e9217f782a772c0be41f07c519d35e3885c5871e61846f4834479f31b4780229912c6024e0360229b674e528163a45fd63e75e61da90fd4f2b
TLSH
T1F1B001A8550642A2EC4412B365CA065267786E145A8A1A9298E929548C332956632AA4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586d7a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\635b4ba12a53eb6a424970a60aaf590f96d3a879\e491989c-d336-420d-ba17-cd6c9a56d965\index-dir\the-real-index~RFe586d7a.TMP
Size 48B
SHA256 ed60b1e7743b2de6e8853d9cf13533d8a4f080969d03477d09d2fb01117679c0
MD5 9a425099fa66a55d923bb7985e60c734
SHA1 f5109c396648e08800d48a7fd894d047a27ef566
SHA512 4a1fe3c42fab3bda384d1ebfa7c771c2f7d24a02be6555f2bdd886f10e06fc7870ec53eb2d319b8e648c96b95805e152f0253d78546457eb7c8f7d7d053d82f9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\635b4ba12a53eb6a424970a60aaf590f96d3a879\index.txt
Size 168B
SHA256 c922f26162bb9c990e2724460e8caedd1a3f57c8003a652e71aa6597d630a9b9
MD5 7f3c62978a3eea36ce1eef39b80b8b57
SHA1 f56e5d195e7f1308130b9f309752f7225fd81753
SHA512 7526f2e1b3affdd47bae750eccaa363746154f68ff27b274153aa2bfc99e526b92e36ba95c4ed5ac1d5562d1649dabab67210fd4c56eb8261ed4ed64c3144578
TLSH
T17BC08C33031E818CF8A10287A22C2824BF02E25819CCC0CDCC4030462320CF72D11FEA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe586da9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\635b4ba12a53eb6a424970a60aaf590f96d3a879\index.txt~RFe586da9.TMP
Size 174B
SHA256 7f0038b5c55a3c48aa219e5de79c9e7112521620ada686eff42cff0c3f59170f
MD5 3129f68e5c0a5f592e551e1e181d8719
SHA1 6bacd4736361f5551e7705119f6478c38f76a885
SHA512 7c5e4ff605cacaf60eee5ae1ec81cdcad6944f2f514eacaac120ef5a4748124abaa4020db5d8a31710273a338ebe0f54b16812fbab86a0f251f458f8291fde5f
TLSH
T143C08C33032E414CF9A14287D22C2814BE12ED581DC8C1CDCC4030923330CF76A14FEA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 48d93d28db36c526fd6b426702a21748db0b2848b5ac80decdccb336b8ad5a1b
MD5 0663c534efc4b337ff61213a7be53131
SHA1 514ddedb7b8fda72fe6b46299222ddda129444b4
SHA512 1106750985dd6b2ef512523033ed9828c3f056e00a548b6d1790a8f3ff213cf95e4213a25fc405876f0408cb7e21b5b1c965455eaf676be2bc5a6b9383577299
TLSH
T18CC01271C80D6221C05603B551C3B4EC33249F34DE053F9A57E16F71A9395718019151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586c61.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586c61.TMP
Size 96B
SHA256 92007126b81d5e3671fca10fd79c304e5bc2ff7bb0e874a9bf7393073a92b3a8
MD5 4d9814f791a317a94e21013c0bff024b
SHA1 2aacb9f9d8d698777901ca8d19456d6b372fe9a0
SHA512 4295fddd2671c14ecb5fa125707129086afcdea9f0deb2d1b494713f0b94ad4ee8e11dba0e712570d00558a6d7caa3142cdb624bb824ea097e7609796e397a0a
TLSH
T10EB0220AC202E202C00303F028C2C0EC3020CF20CE030203C3F20E22CC203B200282A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\7a9d091b-f07f-4933-965f-3213585e3ddb\index-dir\the-real-index
Size 72B
SHA256 9ff7c8ab28cb9a3f2001f4c40bb4567f7bff05eb6c8c93ea2bc6d343e9e38b48
MD5 4eef6ea7dd50c81e248028b107f9feb2
SHA1 4d0219019ab1456b94e0bbb5b423b2c70abec08a
SHA512 71467c43f653d8737214e03c25672d11a250df0b7de79abe15c7bb353b5ed7888b5ca9b42c1600ad9abd5fc8b321b8093e3a5019ca19d91b4fa881762480a857
TLSH
T165A0027801605205C81052B6644742B5F272EB61EDC5074781D06D94C9955BA5147178
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5871c0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\7a9d091b-f07f-4933-965f-3213585e3ddb\index-dir\the-real-index~RFe5871c0.TMP
Size 48B
SHA256 1024d8b19454dbe5c34cbe035e701c379672ffb467b1fc5faa159cb163fca9b0
MD5 10c205abd80850bcfbc96ef993557d4f
SHA1 16a231b5ee5f6c1901668aedbdba65a11e684807
SHA512 2ac6ad28c8bbe0c7688c3ce31822b0f8b17ccdcbefb3efb95ce4af3a8cd6408b6f1e190e1c97077ce14d22556d617eb8601f310653d9697fd2222e4a54aab610
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 86B
SHA256 20d02c9cfafa899bfc34efed243fa89046dcba8d267befde8bf4b33a2b84bec6
MD5 5714a2937db546ed3ccfbc52b2876c35
SHA1 c39bc8c24ad8043ff9cc85f5581f06b42cb1a868
SHA512 35b2529c4d9e62fdd1db4addfa52a37dee6e6425067612c22354cdc19adc2f88cfb2ac05e86785a6d0cca58a21cb6f7f764c3b9c94cde6eda5234e8d41eb9fcd
TLSH
T187A002B70605419D7A3055DD6128751DF447815C5CD0DDF5CD0850512134A731001551
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 167B
SHA256 1b5ecd95db6a217ba9ffc68b0308e2b442cfad474dea751c4f54b2f32043f557
MD5 2828719596adc834158483ce7c912ca9
SHA1 b889c3dab7dd629a7a7bf2ecd9609dafead541e1
SHA512 e18f59917d92466cbafd7f95980b91a288df65d15c63c14e9dbf31b08ce9e0581c90c79c3e4dafc8ab481b2b496ae8ba2558e441abe347f7bb16c3f24b445b86
TLSH
T151C08CF70A2042DA2731A6DA61287A1CE4378D6C4CC0CCE9A86DB0422078AA38502A30
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 161B
SHA256 cf2295bedf6f00a2dc4c371b6bd5d552fc66190df8d1caf0e09dad778623bac2
MD5 ce95b16edc8fddf126d54e408127715f
SHA1 36183903f9c51e85187d5ebc83d94469896e191b
SHA512 59e995272d35852cbfeafb1eaf4ee8e9dc8eb8fd66f5efa0ed60a237f34d067a8b3e56bf04c342f433b92a09eedfd450000c6a055c2243060c0ecfb611059050
TLSH
T1E3C08CF7061082DA2A30E6D921287A2CE427C25C4CD0CDE9986C904220B8AA34402A70
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5821db.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5821db.TMP
Size 170B
SHA256 c2ed848144f2b7632f7c18fa30a35972a2df2db316b6764cdc4d1655de956cf6
MD5 536aa6ee0e39303ee45a434361cbbcda
SHA1 c7dc3a599806b5f5da438a205dcf141421a526aa
SHA512 0f971198a06c8ffdec141b4af0db3fce7c3ba95e90146977480f5dd755e5a56861a7199470bb54cffd6f12c1e1acef594ffcb0fed4040d669a1591d737bb7d3b
TLSH
T15DC08CAB4736818E3A20D6D8F029B25CF00BCC699CC0C9F9CD08F49170B87228113A71
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 1f729b4537de89ccb179c90e08e12d37806c8b9412ae53c30981517948e27010
MD5 2ab464ef26243a17fe65907165bec1ca
SHA1 b7e24b114d79a1186b95a76d11c895434ae74378
SHA512 0672ddab275cfa98de01963dc0dc072a239be4693786d80d65b987773f48bcc5c081764b5f8665a49de25bd8fb5a5884a2de4e3420b32230afda9976ada4e7df
SSDEEP 1536:PVaUcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:9aU3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1FC9312BA9E1A1AF799BD5B92725A7809CD13130E716F688C7198534C21D41CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 f1f794a91159117b905383906535e917d7889a7da26f1e41e73a2d8be320a169
MD5 f9030839b46f3798b075801d14767140
SHA1 a766776344878ee02897f6da209e97b73549411c
SHA512 71835a17f0a218f933f3ce408ee44321779627cfd73ada99f6681b9e7e778c6f34172d0d61854bcdd38035312297c85f2e3a4f33b9d49c14207b511d6c27176c
SSDEEP 1536:sVBWcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:uU3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1FA9312BA5E165AF799BE4691729E7809CE22230E315FAD8C619C538C21D01CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 e0d8c2f94743a412944747d8c0902de5b4703953670cfa81b766d740f573cfa3
MD5 e4aaca08b34b74c318b09e3650ad85ad
SHA1 7d970f3bcab6eb919b47585f3ef2a1164e2d3110
SHA512 2b12b1f73f9a9396b4c91ae403432bc622ae958cd0fb0cc86837dae720094e71160492da5777bd54a2834d5445f36bfcdcb09268aa94d7373f9260041fb650b7
SSDEEP 1536:PVBWcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:9U3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1C79312BA5E165AF799BE4691725E7809CE22230E715F6D8C619C538C21D01CC2F63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 e0b616761a93b70c96bc39b86994b00072941cc865e2a45834b1733758f96324
MD5 c54e1e070f99fbdba2b9e63a31c46114
SHA1 56faf7f045bcdfb0ac57b791db6bade856eb343e
SHA512 df4893389a775de1abecf3bf80ee4d91175dad7ae779aeff04317db500322784e45e34420ee86ee14b1c7837ecbc02183519b1bc5b3b66ecf0f34249a9795474
SSDEEP 1536:jVMcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:xM3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1C69302BA5E174AE7997D4A9176AE7809CE12630D70AFA8CC315C638C61D01C92F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 58bad919eab64db19addc7bcec355ade2554beed681f3b2e52e854b28f48746b
MD5 b1a99143058c1245380515f8690a4172
SHA1 bcbf0fa4d2875582cd144ab87fdbdb657d70c576
SHA512 5ef8660e97bc99e658cab0fbe05a0ac64e1a26260502975401e6eda2eca13eeab6b1a609194402c830b7d51fd6e47984544b7f8728190edcbcfffbea4047eda4
SSDEEP 1536:sVIWcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:uJ3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1359312BA5E165AF799BE4691725E780ACE22230E315F6D8C619C538C21D01CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 686511.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 686511.crdownload
Size 3.9MB
SHA256 f7baa5477bb08d6836cf1be53d4bd5c3a74d95bfb3b241d693fbd5780f06ec33
MD5 767c6fa8fe71020aa905bd43c8b9b4e8
SHA1 2e0544a85bce4176a39c8ac518dd5d0e6fb5e50a
SHA512 747459ce57ec333d8e74659435bc7b50b3a86ac3ffc29a7a762966efb0d13d07735cf2bf924e8c60cca02b68b73862063fe68516598ca9790072f3c7496d9a03
SSDEEP 98304:eAYE9x9Vef3KZ/x7E3dhqSiBfu3ofErPql4FElU:gE9x9BZ7EHu4yzq
TLSH
T1671623227B4484B5E5C322320F68F7B9D1FDF6251F6A144F37C40E6E8E70681AA36B56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4972-13-0x0000013F0EE70000-0x0000013F0EF9A000-memory.dmp

Download