e8b0fbfd2a18bfd4674fdca5b8640597ba2a8d6fc607903eddcc569a9153a782

Analysis

user interaction
yes
max time kernel
785s
max time network
789s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
inject1.exe
Size 202KB
Sample260503-tkfdtsgt5n
SHA256 e8b0fbfd2a18bfd4674fdca5b8640597ba2a8d6fc607903eddcc569a9153a782
MD5 a887fee03e4241aa99cac3a725f5cb53
SHA1 5f303f3bdb2e5ddf441d1f8292f061fed0085d6f
SHA512 12bcc4ef0a2b38e01db01c36f1d4bc608cf991bc4b5c579ad1d7ef1634e4f184b83a8f84e4f0c6de2cedcf571840d5e412c37d176c9c3403964c6a6e2baebe0f
SSDEEP 768:eigP1rD1hfHrRUDbbxJLx1j/hpJVBw3qq8H6vi3ZAv1me9Sbh9Sb:O1rPLcxVx1ZpJVBI8H66pOmeC
TLSH
T1AE148F0366AC3CD2C039927467BB83D5EB2EEC5453A2C1DF91C002A9997D6EB79327D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
612	chrome.exe
5868	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 18 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134222980202081666"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292114432"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292114432"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365268"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4290799360"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365268"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "74"	LogonUI.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2397528088-2630719772-1129911217-1000\{1CF6F860-F35D-44EF-9DB6-A34B551DCDE6}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
2248	chrome.exe
2248	chrome.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs

pid	Process
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe
Token: SeShutdownPrivilege	3268	chrome.exe
Token: SeCreatePagefilePrivilege	3268	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
3268	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe
4704	chrome.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4572	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3268 wrote to memory of 1432	3268	chrome.exe	80
PID 3268 wrote to memory of 4300	3268	chrome.exe	81
PID 3268 wrote to memory of 4300	3268	chrome.exe	81
PID 3268 wrote to memory of 5868	3268	chrome.exe	82
PID 3268 wrote to memory of 3568	3268	chrome.exe	83
PID 3268 wrote to memory of 3568	3268	chrome.exe	83
PID 3268 wrote to memory of 3972	3268	chrome.exe	85
PID 3268 wrote to memory of 3972	3268	chrome.exe	85
PID 3268 wrote to memory of 3944	3268	chrome.exe	86
PID 3268 wrote to memory of 3944	3268	chrome.exe	86
PID 3268 wrote to memory of 5964	3268	chrome.exe	87
PID 3268 wrote to memory of 5964	3268	chrome.exe	87
PID 3268 wrote to memory of 3672	3268	chrome.exe	89
PID 3268 wrote to memory of 3672	3268	chrome.exe	89
PID 3268 wrote to memory of 3556	3268	chrome.exe	90
PID 3268 wrote to memory of 5160	3268	chrome.exe	92
PID 3268 wrote to memory of 5160	3268	chrome.exe	92
PID 3268 wrote to memory of 2588	3268	chrome.exe	93
PID 3268 wrote to memory of 2588	3268	chrome.exe	93
PID 3268 wrote to memory of 1640	3268	chrome.exe	94
PID 3268 wrote to memory of 4580	3268	chrome.exe	95
PID 3268 wrote to memory of 5184	3268	chrome.exe	96
PID 3268 wrote to memory of 4084	3268	chrome.exe	97
PID 3268 wrote to memory of 4084	3268	chrome.exe	97
PID 3268 wrote to memory of 1784	3268	chrome.exe	98
PID 3268 wrote to memory of 1784	3268	chrome.exe	98
PID 3268 wrote to memory of 5112	3268	chrome.exe	99
PID 3268 wrote to memory of 5112	3268	chrome.exe	99
PID 3268 wrote to memory of 1888	3268	chrome.exe	100
PID 3268 wrote to memory of 1888	3268	chrome.exe	100
PID 3268 wrote to memory of 1048	3268	chrome.exe	101
PID 3268 wrote to memory of 1048	3268	chrome.exe	101
PID 3268 wrote to memory of 2436	3268	chrome.exe	102
PID 3268 wrote to memory of 2436	3268	chrome.exe	102
PID 3268 wrote to memory of 1820	3268	chrome.exe	103
PID 3268 wrote to memory of 1820	3268	chrome.exe	103
PID 3268 wrote to memory of 2388	3268	chrome.exe	104
PID 3268 wrote to memory of 2388	3268	chrome.exe	104
PID 3268 wrote to memory of 3384	3268	chrome.exe	105
PID 3268 wrote to memory of 3384	3268	chrome.exe	105
PID 3268 wrote to memory of 5020	3268	chrome.exe	106
PID 3268 wrote to memory of 5020	3268	chrome.exe	106
PID 3268 wrote to memory of 2424	3268	chrome.exe	107
PID 3268 wrote to memory of 2424	3268	chrome.exe	107
PID 3268 wrote to memory of 2556	3268	chrome.exe	108
PID 3268 wrote to memory of 2556	3268	chrome.exe	108
PID 3268 wrote to memory of 3784	3268	chrome.exe	109
PID 3268 wrote to memory of 3784	3268	chrome.exe	109
PID 3268 wrote to memory of 564	3268	chrome.exe	110
PID 3268 wrote to memory of 564	3268	chrome.exe	110
PID 3268 wrote to memory of 4432	3268	chrome.exe	111
PID 3268 wrote to memory of 4432	3268	chrome.exe	111
PID 3268 wrote to memory of 1012	3268	chrome.exe	114
PID 3268 wrote to memory of 1012	3268	chrome.exe	114
PID 3268 wrote to memory of 4644	3268	chrome.exe	115
PID 3268 wrote to memory of 4644	3268	chrome.exe	115
PID 4704 wrote to memory of 3192	4704	chrome.exe	117
PID 4704 wrote to memory of 612	4704	chrome.exe	118
PID 4704 wrote to memory of 2600	4704	chrome.exe	119
PID 4704 wrote to memory of 2600	4704	chrome.exe	119
PID 4704 wrote to memory of 5348	4704	chrome.exe	120
PID 4704 wrote to memory of 5348	4704	chrome.exe	120
PID 4704 wrote to memory of 748	4704	chrome.exe	121
PID 4704 wrote to memory of 748	4704	chrome.exe	121

C:\Users\Admin\AppData\Local\Temp\inject1.exe
"C:\Users\Admin\AppData\Local\Temp\inject1.exe"
1⤵
PID:3968

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff88420c728,0x7ff88420c734,0x7ff88420c740
  2⤵
  PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,11852583440724775328,5425237038187065844,262144 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2284,i,10129785557221536061,956665241962274902,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2320 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,952932865793080371,7774929500639778229,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2336 /prefetch:13
  2⤵
  PID:3568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,13392560692238790118,14789764562060694726,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,16151362431310437624,14373361180409534734,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4264,i,4981538695422270232,3116645665180398984,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4284 /prefetch:9
  2⤵
  PID:5964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,10534429322522059604,12707642402090405927,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,16102669735582942981,10413226419705300502,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5780,i,11614291092340719875,12088848913539035979,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4716,i,6460868324454358496,229888952595781453,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3308,i,18150289867974053004,12284520815903702359,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3536 /prefetch:14
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3576,i,10374588012180849034,672282711874777022,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3488 /prefetch:14
  2⤵
  PID:4580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3508,i,16625280589992856514,5655546203684169270,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3692 /prefetch:14
  2⤵
  PID:5184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3700,i,5361700847888884246,3357639616282834009,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4408 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3536,i,10145618644119610204,8587050883966932337,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3640,i,15242704777638638410,4945466013328452395,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4288,i,12809908664508007569,6479534827704007223,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5936,i,18060088436924721367,951691222361552991,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4812,i,8138687920499991514,5866601674960280323,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5956,i,765216621780897372,17114458551879271467,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6168,i,16131256642754585325,15455401964303734350,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6148 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6428,i,2302679531100566397,17045173952493792789,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5960,i,14936673290811497869,9766107506918734012,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6172,i,17877738008103900693,12778371932968591822,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6912,i,10303342844661553094,1370846822511494950,524288 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6392 /prefetch:12
  2⤵
  PID:2556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6956,i,6004392811857951265,18377500058377446614,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7088,i,606283527182352776,13427515439890203754,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6292,i,8953981875475040513,16791825239467778210,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7612,i,18232120563653706278,14694301556694541560,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6248,i,7637968910276034069,1574859392732291525,2097152 --field-trial-handle=1972,i,5617041825589417641,12121625970240635089,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=7260 /prefetch:1
  2⤵
  PID:4644

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3432

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4720

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:4240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff88420c728,0x7ff88420c734,0x7ff88420c740
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1856,i,12355347086370295776,7490864674344844820,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=2068 /prefetch:11
  2⤵
  - System Time Discovery
  PID:612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1564,i,4537268836438963361,10759256008590450225,262144 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,2577576913723226184,10654002884648491128,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=2316 /prefetch:13
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,2386833982340683303,5578842124297987203,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3312,i,12614138396912896461,3889315078419294484,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4412,i,14762254870488731605,5443096084739016687,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5184,i,6736337906072336792,2235649983123073386,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:5996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5448,i,4253280100257270963,15054962173319219798,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3648,i,9727019372120685844,4137861621603114298,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3496,i,18409975048850291068,8170325390622025772,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5676,i,18393087085877269463,9837722026332161236,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5684 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,5326306408318818048,7848420801270086842,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=4540 /prefetch:12
  2⤵
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5868,i,12964398746973309961,14684684656779953622,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3464,i,2447051575522481089,6132483509505026232,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3644,i,2749050545892594913,17655588933131648912,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3612,i,13168442963531251631,17838612113763094885,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3416 /prefetch:14
  2⤵
  PID:4644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3516,i,17026464667269518283,453117333851611857,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3636 /prefetch:14
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3608,i,12949770696949185431,5672963513984222203,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5940 /prefetch:14
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5560,i,8074470954670205465,14097928611327766484,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=1168,i,10641090962504403371,15823112726011887120,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3408,i,8810613622670035029,6317820803326306739,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5620,i,16129371366194591430,3359836839854375337,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5624,i,3870807460206957104,5268970528254215447,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5504,i,7262717885273185175,6545844552787862815,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3788,i,7717414861944899640,15153076824243181149,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6444,i,2491253820718082997,4410420806290510894,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6236 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6640,i,10670842249676204613,7478795537768506110,262144 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6068 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6000,i,15464693919492601518,18084870647811965808,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6668,i,9378247502084252343,3999799496454293042,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6936,i,5934143405480146031,16661948937942970054,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6624 /prefetch:14
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7132,i,10575875726681651233,15619940688012617964,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5496,i,12866450564274185435,6796182436156972257,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3612,i,13669603047288056028,17497796679326138243,524288 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6388 /prefetch:14
  2⤵
  PID:3928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=3600,i,7093851032878477303,7032882690968516889,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=6444,i,3414245944604146259,12337312790146652978,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7284,i,11579460249472548577,9974063457729504747,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=5468,i,12638946789370544595,16802707168012156380,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=3796,i,6846939338395704761,9970653103961887946,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7548,i,15582339198007727263,15570189899343357256,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=7544 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=7608,i,13562214097835823025,1935624319441225406,2097152 --field-trial-handle=2036,i,12604418392989714230,3526660837037041898,262144 --variations-seed-version=20260503-030041.542000-production --mojo-platform-channel-handle=7756 /prefetch:1
  2⤵
  PID:3768

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5648

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa39d0855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:4572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13be3a15-5dcb-4a7a-a61a-159fde64a136.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\13be3a15-5dcb-4a7a-a61a-159fde64a136.tmp
Size 199KB
SHA256 17d708e07056cefe11e08b30fc5c9b6cb6d5ffe5a5bd167013db476307d64f4e
MD5 e2f246c53fb25ea12df880ee278d951a
SHA1 afb251a509d5ecba967bceb68b1495a8a7dc570b
SHA512 66cd81dd1258110333ab5d5dab65f74b4c56f56578a819715449ded04063a11a0d837e4984c38ffbd4f2093e20728283e169996bb05e728d308ad8a2c2731541
SSDEEP 6144:fmWqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:folEN3k7GJc86HyOMWS
TLSH
T1051412B61E0B343221AC9799200B7C5A4DE38CCE1E1D39FC12E15BAB096B3D2B35BC55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 dc16642704bbd372b6b47bd40a67b3413b4b7662236763e613a05a38e3b945e9
MD5 6c354b71b1035c9a05249154bf2c7eaa
SHA1 818a1522b5415c5dde6731dea3ccdd609647f1b0
SHA512 64495d08931e8c0d7fce3ed657eac2ade85545fba2df0ad2a6fcbebf2cadea317fef84c21734100265a8766cf23f22ade353123805ce79e3170a8a9be5feb6d4
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 89e57ef32e0e19afeb4827a87ee0a4846ef4b3a375cccbbdd1ad52ea7afd16ec
MD5 f316718b1e667334fd70e2dc5e9681f9
SHA1 d6334e15c4d43f68d73384cb9ba5e16a2a5c47f5
SHA512 d15608aa998223895da067e90b4f42b08b763ced52f30c6823a88a3d7d48c8861c8637af0ee395de7daf3080f7487b713406fda7ab401714593759eae703fd73
TLSH
T1D8E02BAAC82AEC3B5DFE075960948746F74113572740992F7A3D830D8F74A3E1285C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000076
Size 32KB
SHA256 bb5ca09fcfaaab833ce73ee1a60c15995b5f7aa93d42c138979d48e23723249e
MD5 05c6575d567b58eb3fc43583325bd9d5
SHA1 0200b98c0f79e6b85b3865d048cff9c24977add3
SHA512 5f31fa5f593e68ed246f0ca3bbd70efe5c954042f57d0696f5b162a8456968d0a2fd4c2b50441dea90e01c570631c458b67ab1d0f116ca72ded8d1941aa961c5
SSDEEP 768:RcbZCbXOlNd0/kbc4PijuO0NfBMTE13l8ziZv0Eb3xM/Gs:RU5Pw4PyuDBBMw118y0EWV
TLSH
T188E2E1E9E6173649D36F128D1F90C1C21AD813F7C641D21D05E23C66B7167633E9EE68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000077
Size 25KB
SHA256 ccf3402725f7a5b3b1a3d706ba0d35b796c2b83e3efda6633e0bcef9f33a544b
MD5 d862a62926d8b783963bd04bc1d971ba
SHA1 85645cbe1e8c71db15ad5d5aa86b6cf33f56c41f
SHA512 3e8d09e949795ec011041528009c1c7739bed5bba554d609ebe9274d31f21ead7826577e5c4c0896d219432d831897faec7160a0404730f59d7ab4f7aea3fe04
SSDEEP 384:X4TdfHAsshepNDTzWPrY3UqE9fzXZB1OAlm4SyGAZTbWdIjXRl+GCHe3lhb7ekzX:oTdfgXhMJ0K/6m44AZTVjXRp82veeTb/
TLSH
T1B3B2F1C6E94D26E4FDC37F1A9B8A3B4E0A927FD011289011909F8B8CB076F50D07976E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078
Size 30KB
SHA256 ab9889edcffe4e7d9d629f85c81321e14dceae51071c947165fa598001ec0cca
MD5 f3d462b08cedcceccbf86281a2e58c1e
SHA1 476be73b94dd60b616f25d65c54d634736247399
SHA512 1aa951ce738f7761a7e88cfde51e0d7e2f2cf0dfe970af0574259cc4ef766e1e8693c6da4e1db25ddcdc4b634dc50692ba490201b3da136b542785612a31c9d5
SSDEEP 768:ZGDpEOChUyEqR5ht2SyX5bDvDerB/yfEVYPT5ezwBG7JfH4i:Z4iOC9TRzt2LXZrDeFyf6WIww9fHx
TLSH
T18CE2E27106E828189F31C5BDE374AAE0B15B86F546D04FFF93E6C1AF1652F1A2C6C149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007b
Size 56KB
SHA256 f7a186671ac06805baadf83b724832bc9ae8acbe861b211875a6ba206de94a03
MD5 be850facc50a738f3001fe7c205a9ce0
SHA1 7f80adf6df5a07b4ef9e76f84034e6b0b32d0903
SHA512 c0ed296a97b1b06107ed36349f71d209e7a70102cda53479cb7c65cc373005c4a95fe7e150fb3bac5836eaddb58b7c9b5eb3e3118f425c26a1775f9c912cb7a9
SSDEEP 1536:7Gp0piu20tG4a7VCZiUbAwn6xd45YRuJn7w/rbazkkhE:7tp9tva7VCZTxn6/45YRM7wyzkkK
TLSH
T16443123AD235AA375DA19E6738A7E07D8600604B0BABEC8D5235FF8964537343F71E18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007c
Size 23KB
SHA256 9ecf61a1eca52c0bb08f5b9c3ad4cba56447587f71ee47597d6e5de160e5690a
MD5 63312d828fc74445106a53b10315589a
SHA1 5516e6b0ba59de6a8f7dc9bbbfeef67aaf6f23d0
SHA512 db137540b6915cc621b1bba17921853bf8350ccb8bd1abe5e0d945ee3fb626ee3439a12e0305918339a9069337928e8b9120c494e9c930daecb94eb5f6e754f8
SSDEEP 384:uQawe8+bUNfNcC/XxhK6l/XHhaElhzkXoA4Thbgc8aeNKcqNq5ZzqeKBzVaNzh:uz8+o5CUBo4/BaWhzwojhbgcQDGbBaNl
TLSH
T135B2D01ECBE5B68B70854F521C390F76116A83619C486F2A730C79EB46834262EFF5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007d
Size 19KB
SHA256 66b82ee5ceb22028ea131667b2d6ae73b2ae814663de2a936b9be799586c1a70
MD5 b555b0a3cbb93a672dd7d021ae7f7e54
SHA1 6513fb0b47ae3b0bdd9c0c3d989574695287c226
SHA512 75036a9a72b8a27dec31d2db4d21cd9be3dd94ef6f78443d91c790c93ba931642cbaa09a373906397aaa4ad8a7983ff6890fc41e69565403ac6fda55adf16558
SSDEEP 384:Jvxn3abmMlSN/Ig28kmYn1EwedcFNKqu/hZx3/Q0/bnaLP/xFB5SewAWBU:Jvx3abEBIg3YqdcZ6h/Q0/0P/xFB5S2R
TLSH
T1F592E09A930AB0C68983DF22E08EC5925F8BF9BC93467C572499438C871F15F7DBD192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007e
Size 33KB
SHA256 0dc9eb4a766e9acd7a1c82ceb1ca5fb62b4eb4af974b946aca124cbed781ad9a
MD5 2cf380619db0164bcb4afc9d05dcab95
SHA1 df8109dbdd2d6586f817d9038202595fcf40fac3
SHA512 146d4d5d84d4574df58eeb4188fde221af4ac6fca610508675bd542f50709661a5f9a5e03e85e19d8374a5319eaa19cda9a925104877d5565f358fb63838754b
SSDEEP 768:y3md6+lvSFAHQNSyCNbSytG6cpPVBoSNLgqvvpQ1UMBZq04vp6JsRYj:y383HyS/tGtpProX8MBZq04v8SRYj
TLSH
T114F2F1A8D842EFE4EAADDFE0740950F2E634AE1BDDBC11402617DAACA3413535B52E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000080

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000080
Size 55KB
SHA256 f2ab881b9adbb4505f6e6f8c8f7de29febe023b1ddb9c8c985c808b3a3d1d57d
MD5 7d551617bd30cfa759413edc8640578d
SHA1 b4621179cb1e8bc313c6857d13425caf2206b4c8
SHA512 e872632a516c522b74891fd3319280b2bcff0c2588a0fa0a6def299e23d0b743220c6e35d98bd005f15fd7abb6c4e1682f9831fcb2f64bca401f24255c4f5b29
SSDEEP 1536:CwYn3WNGJwFV8DoOvjBwTrmqP0CSM+2HiDcYkT5v9yKCnEGG:CPWKroOv9wP0CSf2HTYg5AnEGG
TLSH
T13243F154E5788454AB0F1703BB74F0022B72F19D45B861CC6A3C8C13F6AE7A567FAD61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081
Size 61KB
SHA256 8e6774b7bc03af198bc20c7778b897a7585202349be87d24452a6112c090491a
MD5 86a6140f02dc30adcaa8325e226dd094
SHA1 4a635125352be92b7fb96941f39d5f73ae3514a0
SHA512 92f9da8c0e472f80b25db36d51ae02c405de7fde5400e634648f96a7a816529ec6d482f7d8e6101229399a655b294f3c7f20e829e10dd74208392f7b87eb20bb
SSDEEP 1536:jUQHSUhUochxts+N7VD0BoTD9IXwlHBAOhdxXC834k2kEbT0c:QQDhUocNvBTDIKACXC8DEv0c
TLSH
T1B05302BAC7359936D744155E7BCBA52C8D73BFA1C47D70008C1E03E66A65360B0EA2B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000084
Size 33KB
SHA256 f6d90b4589cb89b50e4a8cea221b4353bee14e12f0aca94f8a258539343381d6
MD5 340a17f7e0899026ec3fca6d563e1bc9
SHA1 05fcacb3681717bfa472a46f512d554d646b15ae
SHA512 62fc3adcc22c5d399e0fa819a52d0a73afea6a1284b8c577f0cf392a5e1e933be28e800290c548c0e51fbb76474f986168401eed5ef4da640ec8a989216e3af3
SSDEEP 768:7EJngvvH5XMWph0gyuLm0OOx9FsrmlhYfxYYIvClP:7SngXZXDX+amGHFhMgCN
TLSH
T115F2F1659092ED3AB37BDB8006088EBC7B11AD73360BD6CC30515623913BF3D665D8AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000088
Size 198KB
SHA256 c3da38446d2cf762204d878f7f135c20f12bb6be7a6d6ffecc721a8dd7744d9b
MD5 c8a3d096f72965f9b9b1319bb45f1221
SHA1 91e027964488afc90a2fe0df2a55e8144de1c3f0
SHA512 f52639df2513bda57acc41b90fd72e1f084ba50efe82b42af780e3688605dfc6b3a1137c0244c58b3ff60ea4e71d85aaaab6c9c04360115db4d19228b4a592b0
SSDEEP 3072:aV4ELt03r6Vi74lTqZ+yzRLuPOMPjeb8em4b++/oIXobLv8hx3vo:aDt03r0RTo+yzdujjeb8emqXw83g
TLSH
T1631412EB86B646F114CEE085E59BFA03C15D2E4475EC39ADA09250FE01FDB275422ED3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f6

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f6
Size 60KB
SHA256 cfe0d11564850cd7ed0ffcf0d01db9d306a1179aaba7b8415f39a9e970c23051
MD5 50866fa31ede8c0f2af29e8a935f6f19
SHA1 e62db9d64de328b6659e8ce94b545ac338ac2eef
SHA512 63147828b80cfb02b0befa912eb3b70e67ceccc4c2f46c3f5a03add6dfe952eec472a6b3615b9d7d668345d0b59cf6661adb0d9bcf287c247f60c81f8855954a
SSDEEP 1536:7TiD5lGvdGg4D4lWIaclBbg71AJAG2wT/qPcyN:7mDmFCefB0BzwTqkyN
TLSH
T154530288732675CF86783F0C9D17EB2264391AD015FBE07271009924EF97A18768B9F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f7

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f7
Size 73KB
SHA256 68543fc7e7d9a3ac918b48dfce9faa0e85a98b81c1003907e4b798e32006d132
MD5 8eb8c569c01fd47ed65957a9333a1531
SHA1 15e3c90d1dc9dc45df4e9ab9d9f8d5e9687afe6a
SHA512 89badfc2da116828d616d6ed89c0633f32e99ac7f2f1d298f6e9ec42942e511000b62c2bdec1807f4930fba63644c1edbebbbd525be210cbd8c80a44ee537d6f
SSDEEP 1536:FaVtIv8HrqBXVxPIr9P5eFCzneRBaTJMwRU6zzAHT+mBYmN92LRKb:2XHeyr9PkFCzcaTqiUezAHqqYmE4
TLSH
T142730229E9F546D10C81BC22FBFF29627D254F1A6CD13A6C8591016553F38D8AB432EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000100

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000100
Size 21KB
SHA256 b5d33659516352cbfac430df45f962291cc6703b63fe778523161eedf1e9ede3
MD5 19c81ee20b27f4c7c24b6f46df27c097
SHA1 10378140a566a62328022e49e2b3866ec7589d30
SHA512 59b67c702e8d479b41d534a16d7344b538cf1511742c7897d905e19f38f0e865cb9fd0c22a16f02b79b336f10a1b1b5285019abef8f64b91fb1bf6ec119b1239
SSDEEP 384:SjdMsFUQLubAvYOxIqF7cAZkEU7nXxw5s6hfDkQjuEdjcErV9MvwZJaUrkzt+3Sz:KnYKYUFwbDBw5VRj5cc3ZJRu83C
TLSH
T12CA2E1EA340E0D86833523AD3905BBD52B36BDBAB83542D67A18CD471E176D8B1C6CDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000120

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000120
Size 23KB
SHA256 d673b5ab1021d61a06d8f11bb2de2a841e2ac460cafeeb986c0c2822549d49b8
MD5 4f5a4f8f6a43e4d1ff667b641e6464ac
SHA1 266157e50d2c9c6981bdf610996c683fd2a12698
SHA512 e2c44df6aadf7a5d8bb8fd8334e11dfa5c82b2362b5adf390ddf0f0b0acfac570b78f763f39c9994b6cf175b18deec3e9676b9e6eaa077a43e4f967cccae073c
SSDEEP 384:IIFAp6iVC/DkjgMcwB9rkDx2hVOHrVnM0cQHwn748ZG3m/lKPJGtl8j:5FviVC/DkUMcwck8rsMwn0iom/J8j
TLSH
T158B2E1284CA19E44D7DC18CC4A9D620E2FD0BD2B284893B474B1DD83935F48A2E5FD3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00013a
Size 16KB
SHA256 d7a61b8131c25f4f7949162fcf342c8ba52b0257756aaacf23aa948f0403c842
MD5 38f765ebf31015515a549b80a8e2a37a
SHA1 a83ad6b0910797ac624512eab50884895c6d34e8
SHA512 86f9755856048908be34d7dad7287889bd9735c81e6d54c87069187dee1b841d2fd59e637a478bcb92e699ae9f5f6e5b25c7d6dd3a3efb5251040282c55857b7
SSDEEP 384:lJOEFe1DnrZqDMO/Vo6xX94SszynWVB1lv/05NGyl:RcnruMOVJxWMnWbv/IN/l
TLSH
T1F372BFFA60A31F8CDC9691F84F4D74A1982B8911125A7DB72D250E68CB963188F3C567
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00013b
Size 16KB
SHA256 886f640d4cb31c0114351f25e5eeba98b79e7ae405fcc2ca50aac6ed79ff8995
MD5 9512031162098077b02a291d5bf69f0e
SHA1 e6aa9f69093446d2adbc1b4fba9d1da1ecc81537
SHA512 36ef1ce508610230cf2bf9a2ab63afd79fc7d63a32549bbc168c7d29050516fb17db8b7402f60abcde11e73cf21b4d3b0c92a1621fda4d823ab13f31956f75a4
SSDEEP 384:Fe0SJq2cM9kRFIh7J93L7Yg+0zHtUZMtYc4zeuyhd:FefzYRGl/HYqaVed
TLSH
T17872D0CB45770EBBB18CC225AA5CEC98122E86831A3175F1BC251326B961D3AF0393E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001af

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001af
Size 115KB
SHA256 ed0c59eb8c4856a8bba59b6cbe37d9875f3b5f136ef32b4c9f33fedfd051f16c
MD5 9be7186f8558c79f0d0a96a56dae50f2
SHA1 0120bdf09f7cbdbe278fce6e11e14d0fa7aba31b
SHA512 9009a2120366bc211fddca4499eed45d315712c970b65baa081befe0112aa0149f5c17fd117fd51c4dcd9427ebde73f0ebbc6b5f0de20f774863faf1482872f6
SSDEEP 3072:tMxxzKB6RYjp3+iwE0xHuRWufrCdNUoSaR:tMxxzhEIO0KCLLSaR
TLSH
T151B3121075351529F880D99371FA46ABF0E06D90AF04C9C95125BECBAFCFEAC094963F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001b1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001b1
Size 23KB
SHA256 f7606d2176c36a06bd75dae281efb655862052f5bf2c7740f9a4715a139c0c25
MD5 ad704bf4e8b08fe842883eaf669aaefb
SHA1 da11d3aa1bec267e699331ed08ff4242d90303ca
SHA512 cc01c5c27798f18540ff2452fe03ce82a945fc07d091192726017e2ce21c3d6e29f76cbbb2daa7dd71a50516ec92121525b29904dfb1b723397c17dcbc0fc276
SSDEEP 384:olgZdGap3dTTfdiqoEiJPfLqTkuvA08jl60UCLpIJkiqlL5cQflGHc9:o+Zd9JTAxhdVbjl6POIJkiqN59cc9
TLSH
T14BB2D0EA98963A4E6DAD3070056E298541C098D371DAE53E1953E3CF37E23E077A2917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001bb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001bb
Size 450KB
SHA256 d28b1fccf41cdf69872f1ed0c2b004304eb92748a8602cd636fe9bf1963ad560
MD5 ad659c1958f4a911cd4800eb5eda333a
SHA1 e1d756aeb4a777f1fb0fdc4588fdeec71b45fb6c
SHA512 2f95e33685c25f677f6ede6b0debe1c45bd66af3c9e3f27c21ee2e6fe3b9eda586f718c5325718e6f1d9dcf2ca24ff040e8a9b6a0b95f36b82f08c9aad2897cb
SSDEEP 12288:QkaMAeVLaWi8wF3SrlAGW8DeIdPq9eCaSr6yHSlba4c2st7jb:QkztU82irlAGDyIVq9eCaSuARvb
TLSH
T110A423D04DD6A81806E9B005983CBE4503BD6E4764BBAC9C0E4F30D89BDD74BB6BE752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001ca

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001ca
Size 37KB
SHA256 5abae7a577cd3be47575f8e8c0ada70e7ccd22c0b19e037301a8b4fb645a3ef5
MD5 6136a6ede29ea57f13b4d15e7d9a3868
SHA1 92f62e44a807d2a43529b66979f63b034e08c9f0
SHA512 84d51ec2a7a8b45c5ff4cdd3413f546f179279f7fb101e4056da91a364a21c0cdc25c0a333bcacf291b61cb3429bee01a4bf2e5afb44023d98f5db9bbfb51755
SSDEEP 768:n6CsntEuJa/hEyaYm7H2OkqOil4DvzmBvPmORMqf130fzL4uLRT:rYOuJQuuDyvPn6q10fzkkRT
TLSH
T16403F17E291A805F4171ADF87B1CB447882864AB6B4D7C05EF83B918F8747321675DC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001cc

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001cc
Size 146KB
SHA256 e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82
MD5 44f8148f80e6c3d60fa6425b0cbb862a
SHA1 ec2f4e5f311462dce67b8f354e5bb9a68c12cf58
SHA512 07978f5827f0d5e9191b6970f0a01d10b88e33524c4aa3973d527ace295ee356f907c0374a430785eaabdd1ac06811c841b3da704066044f4d66fa4cc755ec8d
SSDEEP 3072:1q8xfiSXJLOvVpYQgUGUn9bymvMalSSb8S9glCb2XzMZm:A83ZLMVpYKrtPvQRSuzv
TLSH
T1B9E312560A90854E7AD8C661360FEF0FC28F33EA6FFFF2A5E0C1FA8655DC94A2594450
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001da

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001da
Size 35KB
SHA256 8343d479e3692764b8e934128adfb2d2021fc039e9f1b30d353765fc020a77e8
MD5 9540454322c7994beea5f437d127f22a
SHA1 ba4f3224e0ee810d575da007f59262087d67e399
SHA512 f667112c89cc5bacbd3be72e2a1fd4c1e43344d718e53adf1723e61c2a325f6c919292b6b3b9f4ea0c36f345a704cfecabe0ea96be75211984916ac14bdb491b
SSDEEP 768:xWz7D530te/MPTsnzxDhFJrojQzjAwQwryb45/EekYHU/GRGm:4nD5vM8VtFJrDHQN45/EhnGp
TLSH
T1B9F201E28EDFB8B4DD033A924657951A66AACFE306CF247B37F1E2481580E600642B34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001db
Size 36KB
SHA256 f8db6debdb9881afe2344c999c902fb304fce880ef3e3c31f1d97c870d814bd1
MD5 ce905fcb0bbc92bf4361e770deb33ad9
SHA1 9d701613834d4854fbd85e1de87337c5a01a01a0
SHA512 555ba51ce2b9fa788f0b3e2a893190bec96dcabb2b7da627cfa14c12d114f0b1a97c74c3d83abe3aed5d9337e0a74a4f5ed25db68fa7909eb371303073bb63ee
SSDEEP 768:NBBLqDuxJqKr3xXGpO5n1aXQXoSxLb+3avY4/Z7ZOe1Y0Thg8uhpG:B8c9rh9nd6gbZ7Y0TC8GG
TLSH
T1E7F2F2522A8A0D407CFA558751882E8FED5D7FDA49BE49F91BDA8884DF6C0479F33C04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 e9409b254cba3446eaa3b0e064a3fc7d82290555be5dbe6b97881ca0fb7023a1
MD5 aad3c39ac2ec1196628c388fca142823
SHA1 a83646bba8463ba557d1422373fd48b878fbfcce
SHA512 7d387a7cb5684c6586532c68c03e46f3cc1e9ff4bdcffe70924553f6cc2487e54d46e5028025ebb788d9c0b7f8ad4cd9370e10866f05571867d04ee11d10f76c
SSDEEP 192:61kysFDyNnOKihfovsgy2kkCSPMPlYfp2U2:MscO9o/zPmqcU2
TLSH
T166E11B28E8CC0587FF628EF5CEC58E433674D8A4D26B2F1B8226B87C79D7BE62440114
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 22cace2250f96ec14ce9c227696b0df53a18041bde414385784115984776ea19
MD5 9f86150eede8c5ec57f9ccab3f90de1c
SHA1 8e6b0ba58981a3e1464ef88c660cb670185b7a96
SHA512 0e764208cbbe4d4a15ba8f2e53b6e5089bd3bfcea80501d21a015d7fab8bb57cb9f1faf185362712555ccdc807d5318712b93ccce19c658baf9cb69dbf030860
TLSH
T19A71ED59E8C454C7FF192FB888D20E053535E88AA7BF0F1B9467F87C26E7B972058244
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 c585c04aee0fe211af55ee24281076f620abb4667f553e960a557ca85f0b93e0
MD5 b33d4150fc817e1598156c26eb2ae141
SHA1 24af8972bf86b74ca0f60789e0a05343aa56f4bc
SHA512 0ecc24bb3f3edcdcd531695f5207fa88a72a82925c9894f1bb46c629d8c726712262ff65ac81b1c6f874ecb3344ac19f4c26a5dc3ed19ea6e2c201b0ec13c0e8
SSDEEP 192:nPDysFDyN4GQiNffovmg42uk4tN65v1YfpcBT:escnvopqNyaiBT
TLSH
T129F11E64E8CC0197FF624EFACEC98D033674D8A5D26B2F1B8656B83C79D7BE62800155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 5e3ae13dd4c5fa0d0c05903db263fdac5eb46f51b40f405b6ba392c4a8409ec5
MD5 52c881818bfe6a1c2413bb937e1d8554
SHA1 58d9c3f9beb9430f8e26082457c5ba3fe3e68ae3
SHA512 63f9ea4bf33a5376dcbabe22bd64852afeb502b878b76141bf74c8e5cd114de517ad807a214b08add3afb933e5ef69d9acadbe702b3d25de6e25aad57d5a06f2
SSDEEP 192:8HsRysF2y2jvWcLiOdf1vm4a5jswXwcowNR3uCOkXYjZVv+M:Csc6I1MXnosdhojZVv+M
TLSH
T15D2260B8D8C90297FF655EF589C95D0236B9C894DB6B0F0F8A16F47C39D3BE22544068
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 d283fa47ff70b24382ce5bd4197783a751731323dafaec34ff16553a83cb9efe
MD5 397fbc9a0e3edad30c075ac643a35788
SHA1 063d5c8b60388d41bae77ecbccd87be96ff184f7
SHA512 60efda1733b87de750eaa066d2738c917876798731e478de8bc712562dc473025d6c8212870deae790822a44bb9017b80cd795e65b9dee1340811cdd4caeb03c
SSDEEP 192:uX7kysFxyNn8Kih0vsg52uk+yN58lAfp2fT:uLsi8eoLNCOcfT
TLSH
T15BD13E28E4CD15CBDFA00FF58ECA9D473774D8A4926F2F0B8266B87CA9D77E62440154
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 4197389cbda55ecbc7dc8cccfcc48b2ffddb2dc0f17b6dd6b947018829e6ca11
MD5 7f8b3ce366c2d114398ecd59539b28b3
SHA1 9e131929367bfdf1baff71abda488c2dfa90618a
SHA512 2787d1682344611b9e7145e6a0476a9e0c42d41642747b32abb4915f1d64b084a31e39920abd3446c25e8aea124c48589058f2c62bc10b9fbef0f454c90ff91b
SSDEEP 3:MsEllllkEthXllkl2zE/lht:/M/xT02zY
TLSH
T1724404147FD40407DF10313150D1D3503370D41107135743345144775CC57440C00440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 36KB
SHA256 578431ed597bfc924b27ef3f6c11c46072505016407fa2fd2baaa18e844c1ab6
MD5 059766312e491bd0190e618fb0146927
SHA1 ab0f77c57c767ffa6aceff3d679635e544db7f99
SHA512 27c1b2ca4ced58579f61f5d1bbd4f01bd6397544e04d712b14fb7e97d265130c4b346514b586ac0cceda0e6e72f5f520343b4c6e86d530b4f76df3eb7bee1f80
SSDEEP 192:QcJtwlplVzZIlElozfBD1jq8QlCvRQRsUAlOPA1ncGuUnoqqV5/07QXtUlpK4Vba:z03V8+ozfZ1O8Ql2osUu8KzUc7Q9Ka
TLSH
T15BF28FEFAAA97471FF4E4DB9E1196020DA37915CDF5ACDECA85005211C78B6A107CFB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0
Size 44KB
SHA256 2b7b241ecd94fbbc03457c0fae15a761f07aaa31bf4b2c2ee830d5f5b6dd0da2
MD5 7971135596ec35f9a837cb4b79c5c941
SHA1 c46e3332554406f7f43406dde5312c6d0170a94c
SHA512 03183f22ff6dde73754cd140a0fae4340e064044e23d89d4977bd465b10a2ba180b757966c4def94fe4e997f9a6e62a9d4b8a25811e03c9272a3e8a37e0a4e61
SSDEEP 6:/F3XGu1BlUkM/ljSIBlhksv2KJpnev/l:d3XHEjS03+Mm
TLSH
T1E713923CB2D0C017CBC91030960FEE706232D4281A8503C32470343D29493214407C72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 003f16d37c0801ad28cc0b418add1e490b9024252f3ba7510935014cc5957908
MD5 e829cd6ce43b1f77c5d7b93ac0937a21
SHA1 fab7fbaa56913589117430dac85f197aeffb07ce
SHA512 558f2826a3bf5657b289a18ef3439d8bfe39c9a07b9f0e4c6a1cbf0cd4895cf751b763d464cb8b21b5b9837e2bd37e6464441b13095942e5b750420c3da5c3ef
SSDEEP 12:U/LjWXx3PpzJW2O3eQ98PHYpgu53PpzJW2O3vgB+83PpzJW2O31t:U2x3RVQP9i4p753RVQvu+83RVQ
TLSH
T1CF44B12734900C4BFA65C6722232AD79EE2CE158D3830F135200072C69621BA8ED3A90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2
Size 1.0MB
SHA256 84a1d0694670b69bcc80750e9296f90734ce5eeb7497a9b888d54ffc7e68c51c
MD5 90476434f5fa799d8451561c8fd44caf
SHA1 91f61f434a6481c0a46178470a153e58d4af8639
SHA512 950a93a7809d0319004f26bfeaf4425d82f0732fb5fc77c1f31da788a4b9a80c267ce8d64eef8e72bd46aeba2a253761f8ac76611a37461cd3769b08d458d05a
SSDEEP 96:PmZaiwnhAXiU5LvgPdH8sEZTgSpD9FvYUAxH6jzftHqIt+kyPdjTpicsDTdg:PmwzhGioYPVxE6a9FCxHl7xljTpky
TLSH
T1A9258DF31D958D8CD160B5B5AEFB0CA41DB84BD113B2936AA7C6394C7E1519372B1342
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 160KB
SHA256 93cbf49312563d6c82f272c0503a44e5bc52badc12df226945cd739fa35feae2
MD5 bc558e16729724efc1970194ad176d6c
SHA1 23fdba87b6ccd4ddc08f29baa85c0e7134281ac5
SHA512 8a219799d102bfa5e472157b9b944abe68962ab9161ceb42827d64eba9925536fbbce67354f0e72f02685e2a34f54ddb42ffdaa7484ed26114cf7c3be21f1b28
SSDEEP 384:sEI5/tIkUI3ijVpWNkqpUv4UFJ4w9Nlp7:sEIB64iQkqyv4wJ4w9Nlp7
TLSH
T192F3B9AFAF356201CEADC03AB562B055483FA47ECB03E9D898700560CFB1B57527C8B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 47KB
SHA256 65e836ada9a0df740138ea38a3ec6b417dee058cab01685ccee2d5013e9745cf
MD5 2395501fa21afc03b93733cd1ae1a330
SHA1 8f47b435eccefb54bc21400bc4ddcf31287ac432
SHA512 e5ec5eda46fc0133d166df69d15c7907441a1fe215892948d6c300f71032d9e2b680f8f4cfd09631c60da8a6c26adf5ea33f4027fa96199cec4a03a48d920e97
SSDEEP 384:DhuQ75ot6orCiR/sej7IhTNZlP2w16dZk11Zkx+dQ83gMzMzldIkpl9ERJzx9Hsl:kfZCQS/UHtKaxpHxK6opXxGjXaSoHWF
TLSH
T12923CDF783E88A6DD91156F4AB157E1BCE2D0928432C3C7689D5AF0B93E24B1E24174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 4c4e9b310231f700f7569ee43cf8ada32b5d7e78ae898c19c4b32a8bdfd4a543
MD5 82c2d6f0622c10ae2411f3c15f3bca3f
SHA1 16c66e5249d25c72e11b06a9438059c14609a7d1
SHA512 2b12e7e8aaf4256ad10e644382300b6b54c4c9f993fc19959b45275b9e52dd3516255247de6010afb912cd97c9b3505b4d0b10af11385a8a55cea9c40b9fa9ca
SSDEEP 384:DDB7sp4x/IydMbSCPgLGf30XQMA1BQWzaIam2CG6GrGBX9rGVkbrK5IVDXbAKeH1:pC2Cy0/U4wX45pa
TLSH
T10AB2ADF3C3E88A2DD81162F8AB153E1BCE690924536C3C26C8D6AF4B57E15B1E34564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 36KB
SHA256 5dd175381ce4b10dde4054c59e22158d56b6a6d15cf66fabeec611f817d7a3ac
MD5 bdac677ee3cbcf7328396924441d62fe
SHA1 32e257fa246b2d32a13ca1ecb2f545c15fe4b4f0
SHA512 2691111b4b748ce955a608a6b6cd4f4417440fa97f62310bcc119eebb288309f83c9a69ae1a6e64ece799c7b3b5ecc11799f3a21bba52d22a864cfea29f09fa8
SSDEEP 384:DG0eBCBi6+lIf+DDK+NZeg1In9POMB3+n647cFu7d3J3/denJcJNJq3oaIam2CGA:ha4C2Cv/U4wH45pGfrVTDCLJV
TLSH
T167039BF7C3E88A2DD91152F8AB157E1BCE2D0924436C3C26C9D6AF4B93E14B1E34564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 47KB
SHA256 0d68c3391a7f0a9b52f93b8e870b23387c9aeb2e3c35753274a425a6ad45de62
MD5 3549f103f04b954f403e0e58f37ee825
SHA1 4ab907d1e2799c2bf1f66d527fbbb65f3e883c79
SHA512 769b0056f2e42f14f8729eb7dd36a7df225bbf0295ee5137ec7d1c6590e8d50755f0406bebd09ea0e58126e5d387c796b9565ebea82ebed3bb53bca7de7ee1a4
SSDEEP 384:DhuQ75ot6owrCiR/sej7IhTNZlP2w16dZk11Zkx+dQ83gMEzMzldIkpl9ERJzx9f:AfDCQS/UHtKaxpHxK6NpXxGjXaSo9WD
TLSH
T16123CDF783E88A6DD91156F4AB157E1BCE2D0928432C3C7689D5AF0B93E24B1E24174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 43KB
SHA256 9a7d55cf07ea6827cfe4c424e9b7d867fe65d8b8d00861429825a0fb2f4b3677
MD5 9f09b3489147b92b5657e6b40ca393f6
SHA1 4c239d2bcefbd79f2180754dda7240e847e3e176
SHA512 7387df331d0d7993428bfa46e5c6ed62e7c76ee84b248af5788e2d85302c90011d69cde1d9d98c479b19de0aa6945c8eb3dc235b2e4b4217532a8a3287a36c5f
SSDEEP 384:DGuQ75ot6owkitxrCiR/sej7IhTNZlP2w16dZk11d3J3/denJcJNJq3sLIxkxDhL:KadCQS/UHtKaxpK9TDtJ9KO5fEPky
TLSH
T16D13BCF783E88A6DD91156F8AB156E1FCE2D0924432C3C76C9D5AF0B93E24B1E24164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 6KB
SHA256 d04aec6f1a6d97c8c999f97ed4f5c714bbcf6335b31325e1ea2c74cfb86782a8
MD5 387481ceeebb3481e03a9ddf221c567f
SHA1 f8f3aa3490ced0df4859b925c18aa8a8f66617a3
SHA512 fb1ab8dea3b4e80428de7048ca64ae76d0e19ec5dbca9fe7b9256d90c43a268975731cce80f60118fabb5c221f026cb374dc80bb703f86ec31f48adc9f334fdf
SSDEEP 192:YUi8UOUYU/UQUwUUUWUYUvUbUmxUwUZUQUqUNUh0UFlUMUnU1KUKNUXdU4YUqUSi:Yz8/fOTflrvuMn3mDvY/0tmUKpKdCz3i
TLSH
T1B8D19F53CA7EB86B10BD0CBB5D49790929BEE4350391B6F4DABAC12CB0C54F35B12836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 6KB
SHA256 66cc7203cb214ae0b50dd0a6d550986f7dc52027f8572f7a27741890ecc5e8a7
MD5 c64c1cb10e0baee3d33842f60fce6758
SHA1 45ec1ccbb690dc09194e8e6e5210e1c7fc79746a
SHA512 450c19c51e96778118dd0e4419df3c8817f8166054befd948d388fbd260c0c5925486faf34092a0f11c19b02b1ef95075385a5c34722542b451c538af1d3d758
SSDEEP 192:YUi8UOUYU/UQUwUUUWUYUQuU4uUmxUZUsUQUqUNUh0UFlUMUnU1KUKNUXdU4YUqS:Yz8/fOTflrvQin2bDvY/0tmUKpKdCz3i
TLSH
T144D1AE53CA7EB86B50BC0CBB5D49790929BEE4350381B6F4DABAC12CB0C55F35B12836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 069937bc3175a74e82a53784b80164af5ce40339fa6a5cff94b86b0e1056d080
MD5 949cd89877fb1f0d141a22e3dfc2b4c1
SHA1 8ca5e9446f0286d2bd7afa811301745afc27609f
SHA512 467cb633f649d873dc5b42d56e9200b8f170a0dcf01069fd077eda733fbc5efaa08eccf966de04a272070cc4d0e735755d27086c95dbe806000a58fe002a7886
TLSH
T175716BA3CA7EB86B207D086B1D09790929BDE4354392B5F4DE6AC16CB0C54F36F12837
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 52a4020bddd5f3f5eeff9af9516769f674c0cba28c02091d123f7058826602d9
MD5 82351724e55a6cc518ba2c464c915d16
SHA1 29a3777aa2b1217d1f79f5db47f5ba3dccc69dac
SHA512 9aa250a6f798c87ad5cc77ba5f78b1e7a358c7e887184c1e28cec6f154493289cb4c2de7c5628d72802e33df95bf1aed98a22e621cbb5a4d7a7145730164648a
SSDEEP 192:QRScBhGPELUgQ/v7lFMcPRpRzqNxGZG3O/Q9hHsb+WNwArsHePvmPh+3L3TA+0wE:QRSmhGs7IhFpXubwEqvAO8aAZ2yee
TLSH
T1BA72E76BE5302D7B48EAC225F955BB2AE3F2202161D45D94FAFC8F1C15D7ADD220342B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 cf7eb6aada32cea39e30254309bbfafa1aa79530bbb251adf5f55bc9ac1c7e39
MD5 24fb086c3b7412a29e1e9b1f2b41a0b5
SHA1 cc314fd6e60ff182673b128bfa6e9d69e7054478
SHA512 67a266f161d088b2b73cd5a0599081d839baa69965298a49dbba6b12a671cd72b80ae21a3cc2a7084cdad68c4724e2f572b44357378322e2441a784248e37038
SSDEEP 192:QRScBhGPELUPQ/v7lFMcPRpRywqNxGZ01vvg1Cu7PIQ9hHsb+WNiTsVypZP9TeP3:QRSmhGsMIhFpX9bweTvdAO8qAZ2yee
TLSH
T14182A66BE4302D7749EAC225F950FB2AE3B1202151D48D94EAFC8F1C14D7BED220395B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 19KB
SHA256 e22e932db8c5ffa3e82f800a3f3c5d8329cde6b00b4fe29820e0f9a45bdc9fd0
MD5 dddb4ac1f8711b11c394dc0923d377c9
SHA1 7a6c72171b6bd46f92e3db46eae562dec9850a68
SHA512 c734ca9439bd07f6f66e0847d6925c9558a2fc8f98a9e3bb6d616ad805a8ace6dced92f2bce4bca69af569c987fcffd4ba742ea37f37f9bec8cbaeaa9c662ffb
SSDEEP 192:QRFbcBhGPELUP6/v7lFMcPRpRywqNxGZ01vvg1Cu7PIQ9hHsb+WNiTsVypZP9TeF:QRFbmhGsMihFpX9bwe9GvdAO8yAZ2yhe
TLSH
T15E92A66BE4302D7B85EAC225F951FB2EE3B1202151D59D94FAFC8F1C14D7AED220285B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4a84cde2c84abf8fa288075bf004bad3e0badaa41b1d152a6f032da41ad4199c
MD5 4a428eb3ecb1c2f28e38a8442402f67c
SHA1 6de70f625bb7fe991043c7d7a616d2e52d589981
SHA512 975ed215b66cf2dfb8e2fc02dd4747cbd18d8379170017d3685ffb7ad560cc77ec70120719d3b17b4adc1b01b31bbf61f4ad8996b8576a4ba874649d1fc757ad
SSDEEP 192:uRCGPELU+Jhv7+FhAPRp2alHz9hHsb+WNnvDuA424TeaAZ2yFVyIsnAUgtaJ:uRCGsRL6F8XPbw7+2qAZ2yz8
TLSH
T17452D72EF920793B5CEAC219FA61BB17E3F6103131951D88E6FC8A1C15E79CD222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 20KB
SHA256 3d4d0094279fa72180976138d8964013099349fc2cc3db21f6a5abe69baa4b93
MD5 e11c757de374b6a76e800d01e3b9dd3b
SHA1 82803c0564f7ae02d597cc67c942d9ac737f5518
SHA512 db0db9a9cab21f7eeaed6ec8e380d39bc13f4207a22017ee1b34aa1f577ff515d2521cdd7224612649c9143fcb3477f3eaae6ed164da0745dace6de9d3770204
SSDEEP 384:DRmmhGiQvhFpXLMbwRrYE/zdAO87AZ2yhxP:8mhG9TBMbwAX82mP
TLSH
T1B692A56BE4302D7B49EAC225F911F72EE2B1202165D58D94FAFC8F1C14D7AED220285B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 20KB
SHA256 9600cf61d776776a2504d71c217499827902188f45d06c83d8d18f2612d09796
MD5 5a6ed8b3ce0615dfbc97a690435526a4
SHA1 11832dbd899c2c2fc121f1cd25818a0c969c044c
SHA512 07f9f404145fdb9c386ca58ee07dff022925c919e917284d48708ac246d04fc40cc46e55ff34cffc65c98e6b869b4f645929ccd1b673e48f7217184c58ecd257
SSDEEP 384:DRmmhGiAvhFpXL0bwRrYE/VlAO8eAZ2yhxP:8mhGJTB0bwaXh2mP
TLSH
T17292A66BE4302D7B45EAC225F951FB2EE3B1202165D58D94FAFC8F1C14D7AED220285B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 20KB
SHA256 517417e47025df3f3b844e9bbc21a31a131cfdcab15a3138c102e82902aab9ce
MD5 7a7b02b74ae805ba46858384c6b6891e
SHA1 c4c736445d8a9d1faa7645704a47bdbbe768b60f
SHA512 1d15a9849830e6a061400b7d5004ed2708c248177d625f191b89dbf6936399212460705c23f13d27771c276afaf478aabdcdca13e5b319d6a95df0415164fa7c
SSDEEP 384:DRmmhGiVVhF+XLubwvrYE/VlAO8eAZ2yhxP:8mhGEduubwQXh2mP
TLSH
T10292A66BE4302D7745EAC225F911FB2EE3B2202161D58D94FAFC8F1C14D7AED220285B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 3b1e02c2226a0f9e8037cc7781d1d9807063f7138c7ad4af38f1e7f80fdf9b3c
MD5 62561dae4f1f7ce0e1e7a9d20dfb4a4c
SHA1 8759e8a8d57bcdd2e05c31fb6adcc5284a7d50a3
SHA512 e52a5245d5a8ce9e6adbe93b76eb265e41426f4bb7e45b799aa237f6a3a443b67c217d26113b119423f83e8421569ff51e073c6c57278b1c5699ddf185d491dc
SSDEEP 192:bRScBzGPELUZJ/Zv7+FMcPRpRzqNxG9G9O/Q9hHsb+WNNTHqnjKhBN3TYTTeaAZP:bRSmzGsCD6FpXIbwcKdYjAZ2y+e
TLSH
T12F72F72BE5202D774CEAC229F951B72BE3F2202161D55D94E6FC8F1C14E7ADD221302B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 05659c24d472d7c41de48b22fca2d0ba96665a9721941ca4c0ee22a34a4dc72c
MD5 f5566b8a305a8f902495661d5a41f893
SHA1 db23b92116892461cad0c72ce0a0006f3698bd1f
SHA512 c797f74f3b86a6bf88b8e56e91f1ddfb55c79229dba042cbce0173fd843703c51e9706e1781e4e10d5459137122fb4f379a2377c013de00b02451b748fd5c0af
SSDEEP 192:bRScBzGPELUZJ//v7+FMcPRpRzqNxG9G9O/Q9hHsb+WNNTHqnjKhBN3TA+0w8KT0:bRSmzGsCt6FpXIbwcKdAO8gAZ2y+e
TLSH
T11072E72BE5202D774DEAC225F951B72BE3F2202161D95D94EAFC8F1C15E7ADD221302B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 19KB
SHA256 236aa44accf390397a85a2c85c2188937190c6b21c750b9057c2268b11bd7339
MD5 1399316afbb4e63072e1ae1be73ac27c
SHA1 55e4f4b9a1b5adfaa9476166d5c9d1a38bd125da
SHA512 7e42d785a604a5de58331a1c0bb9a789585b07f8aa8fa22534986322038cf941c0fe60dce7298c118e3a46cc6ec43dceb7692234b46b240b5c461eaa3f4e8340
SSDEEP 384:ZRFbmhGs+ihFpXLcbwtJhFdAO8OAZ2yhe:JbmhGBcBcbwyXR2X
TLSH
T13992B66BE4306D7B88EAC225F911F72AE3B1202152D59D94FAFC8F1C14D7AED620245B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 19KB
SHA256 0988533c6ab6bba48a397a0715d48c44a20560ee56fbaed885ef9671cd863e9b
MD5 ef22d9c282b3ebb58e79d16df24951dc
SHA1 3c6841f38184df7bd5bf295bda564c75bc90bfc9
SHA512 2efbff00d3b8ba9df30c8470f72bd55c59e34517c1538472d9e5f3373d051629e7b1adf59080728fd6fc16127c1bf891082aefa45f31d663e9ccbddce3c2e16a
SSDEEP 384:ZRFbmhGi+WhFpXLPbwanxFdAO8KAZ2yhxP:JbmhGvQBPbwpXl2mP
TLSH
T11792B76BE4302D7B45EAC229F951F72AE3B1202152D48D94FAFC8F1C15D7AED620385B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 19KB
SHA256 b44826e261657a6a7a3c325dbafd32a8b43889626682724a0f45cd60564e019f
MD5 c06d3c210b0da44119fa1962d6c84a56
SHA1 6f2eca818a3774e74ef540940740bc486fd67923
SHA512 1f67b1536620d99447e47890ae9f0a8075cc707adbc359f2b31116e2874da1590de37f5a406062dfa1d8a57c951a3e8e71855868778161760050e78f0b5670ce
SSDEEP 384:DRmmzGiQvhFpXLfbwgrYE/dAO8JAZ2yhxP:8mzG9TBfbw9XW2mP
TLSH
T11592B66BE4302D7B45EAC225F951B72AE3B2202161D58D94EAFC8F1C14D7AED220385B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 18KB
SHA256 338be3917e9ac3d85ab898f2cf078c0bfe14f38692fcb4868cd605a00dfa8769
MD5 618d4a154ee5b64efd303eb570087d4c
SHA1 a8a40fa9c902849d1806f46e3230695c783c350f
SHA512 fd0e94ad6cd714b77464cffb4e057281e30d98fecc09070fa3b4b37b6f055841c00996445cef4ca068147d2927a8f9a04b92a0a84e375c13a9258960f405f7e4
SSDEEP 192:QRScBhGPELUP6/v7lFMcPRpRywqNxGZ01vvg1Cu7PIQ9hHsb+WNiTsVypZP9TePp:QRSmhGsMihFpX9bwe1svdAO80AZ2yhe
TLSH
T12192A66BE4302D7B49EAC225F910FB2AE3B1202151D58D94FAFC8F1C14D7BED220295B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 1eb72f0155c61dfdc741891d6e3ce421b42e0f564600e4081b02cbf4ae76f649
MD5 d0178e8ac14b408b7d1ca9601385f54e
SHA1 71c0ddf5138808cb6ad4b1bff58c6e73f18fb148
SHA512 0fc7f16671e529c849afe3b99ae992b8dc2cf4f508f8c2d86697560ff31788412a3c02e768536be324b698281979975882ec44da5309c46bfb838bb23a3ed16f
SSDEEP 192:bRScBzGPELUZJhv7+FMAPRp2aG9G9z9hHsb+WNEqnjKhBN3TYXTeaAZ2yyVyIsnB:bRSmzGsCL6FtXjbwnKdYfAZ2yye
TLSH
T11152E72BF920797B5DEAC219F951B72BE3F2102121955D88E6FC8A1C15E7ACD221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 c9aa80e2bc7dcaf406afb2aceb359dc863f3a96c97ce9d9ce1e2a9728b0032c8
MD5 091ce0f8e400fd1f1557a0fdec27f363
SHA1 fff638a93186f87986cb63de8ff4331dfe40b963
SHA512 9a38b21ce800596e638c3be368b3721ab34f4ed00398f0253b1854c7906f5c339dda680a039e07b5d0dd894e4279b9df8d2d5ebc1975f10c3ef0e05a80b321c3
SSDEEP 192:bRScBzGPELUZJ//v7+FMcPRpRzqNxG9G9O/Q9hHsb+WNwArsHePnjKhBN3TA+0wU:bRSmzGsCt6FpXIbwfKdAO83AZ2y9e
TLSH
T1C572E76BE4302D7749EAC225F955B72AE3F2202161D49D94EAFC8F1C15E7BDD220342B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 19KB
SHA256 afc86ef36aa9639ab153b5b00cd1de48db3ec45a3ea46e8c3dd18eb7db83bd1c
MD5 2ccedc98b7be9dec9738b3e7203bf095
SHA1 2aa28a32568d77089f42cfb6cae249dcf8c4c7ed
SHA512 225f74e4b95a7ace3da18eea80646043d3cca71aa9e4d9e94e6d6d1b1b42ca32d33ae49b030b9ad1be67e46c4c09e93f56bf48274ecf239007d0ac1876a24944
SSDEEP 384:ZRFbmhGi+0hFpXLPbwaJhFdAO8bAZ2yhe:JbmhGvCBPbwBXc2X
TLSH
T1B492B66BE4302D7B84EAC225F911F72AE3B1202152D58D94EAFC8F1C15D7AED620395B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 7aea5b2a37bbc012d86991fbcbb0171cc3611817a9f5bec62da9ad63dcb7e60d
MD5 9a5559aba3351ccb21c91072959ca1ff
SHA1 d19d764dfb6fb1c7314054ea1f32b23d279232da
SHA512 fbc01b85ed280bb785583f30f258e7057d45944bc2b8835c947650a37d49c123a5a64c83a4c441244008a3ba134a778bb862bd23793e9af530cfeeced0843be2
SSDEEP 192:QRScBzGPELUgQ/v7+FMcPRpRzqNxG9G9O/Q9hHsb+WNwArsHePvmPhhBN3TA+0w4:QRSmzGs7I6FpXIbwEZdAO8KAZ2yee
TLSH
T1E672E76BE5302D7748EAC229F955F72AE3F2202161D49D94EAFC8F1C15D7ADD220342B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 21KB
SHA256 bfbc5557c26e574dcfe4c3b3f9bf3c3c3b1cdda986b883f9ebb9a728483f3561
MD5 6f51ba7b372946bac3fccd4678c3cab7
SHA1 4610dd3334b770567e614e938056e2a5f92ba53e
SHA512 6e40dce17da5471c9a15e6304f03c5dc22561468255efa47797bdd273a3f525b8de148e604941be49a2e97a4c11f99a1d13b643fc26e5f460abee07bf9d83e8f
SSDEEP 384:DRmmhGiVChF+XLubwPrY40/VlAO89AZ2yyxP:8mhGE8uubwMMXy2nP
TLSH
T15FA2A56BE4302D7785EAC225F911FB2AE3B1202155D48D94FAFC8F1C14D7BED620285B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82f19bdaa200c3a3056c6486f8d9171c832143077338572b10c4c0ee03580c4b
MD5 80e775e497e26256725722f158c1a7e7
SHA1 24ed3e37ba5a437a46beacb73c33c43eae3aec98
SHA512 09ac01744410777e518bc948ab2c8649e18de947108d5d4afd77f70e32dbc68ce133ca9306edde725939c3c02ac6e14f160c2e4f358579e678e152b19c349bfd
SSDEEP 384:oSj0X7KxkXqKf/pUZNCgVLH2HfgslrL7pLuLcifyTXOD0b+ErU3wRHGU/QT:oy0X7KxkXqKf/pUZNCgVLH2Hfgs1L7pY
TLSH
T1E77219676C4C9E3B0FA4CACCDC16BE4FADB5024B65D9886843FA582903D5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\27e42b79-8c79-4f6b-abde-6ff77a9bae3a\index-dir\the-real-index
Size 72B
SHA256 562ee0b7a8f4689bff08502e882848b5f4380f35c3639bb64b2d9231f0aa674d
MD5 1025e5653b659dab700334c3827f7963
SHA1 d379d52f7a84d1f8bc99122729b08194724b4b89
SHA512 9333e7af7b730d199d1565b369f58ab0f775586ece5fe6996d6f332c96c74512b195c12e75a7a7fdbf1331f935f0ff36285f35c1e6786537e14bd0d802382cc2
TLSH
T1C7A0023301800071C54823706847415176924C105192524640E8669D8955248413587C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cbffc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\27e42b79-8c79-4f6b-abde-6ff77a9bae3a\index-dir\the-real-index~RFe5cbffc.TMP
Size 48B
SHA256 08f1daf29af192e50c07f85f477f59b6e87c5170b8bed32d6c7ecf7a97b91002
MD5 0a1da8b0a3780a412bd972bf7cb4a563
SHA1 5783dd3653ffbbbe44f0a9d694830a43704a6b73
SHA512 7fab295332d27b434df28c25dab8ccfb23438980f8c1eb2cf20218f7c55c8c53e4750c575e967a5a35768b107279953c5c51af59514605d80ac88dfb790a119a
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\index.txt
Size 135B
SHA256 80b69022a3f561df49138c2c649532cfbeed32845f46fa8c4c1d7de6a2b992d3
MD5 76bd76836b77484a7150ccc3251deca1
SHA1 dfc217761f780525dab26d84a44bb5d07b6e50b7
SHA512 b74eaf09417bdfa06880fdce4a1a229e5a78082d6fb6141c8aeb9a35a529a79cf09b427205b88c30bbea2244a42e3be680458b36bc7f80ed39fbaca0c5d1998d
TLSH
T1B2C04CA7D815A0415D91E3A07525A669882619EA8C5D8591944004D6524589305879E5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5cc03a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\28da9c56fde4021055a681112c092453f74d8dd8\index.txt~RFe5cc03a.TMP
Size 141B
SHA256 ad6db61577527925578c01d453ae6d3c69cf9c4c593f02a1720487c2fd1ac8a2
MD5 9c81d5c0e353b2d42c5a73b461923065
SHA1 44887c082a5468fb771552b843f35d1e670b673f
SHA512 6acff4a0e456031dbfad9ceb8207ab36602e6e9488737e055b8386de957418df0f62f928bf6d391658eee27a4c30135543f5a3cd1af3b700344a0205bede5e9b
TLSH
T149C08CA3E00270412AC0E2A0B535AA9888264DEA8C4C8580D00020C29270883018A8E5
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 1860c04b5b2654e206a79d9aebd0ef3671a20741748f969a9870c50f6c105cfb
MD5 e2c2626c6a2b49b62883172511e8c58f
SHA1 43f0c04d6272c8e66bbb740ac3ebc79d47262ee1
SHA512 62332339f36d26a84790c602a06ac1056e345c6ff9e8e7654b8c96cb46f381d906365935a360ee9f8fbeec09076a8c3fbcbcd3511280a361d1235199f0ec6f6a
SSDEEP 96:F1mK9MrRwcnDh1JxI0LXbXFXKXTDFXSXTdXFXKXTWxhXsXo0XbXNXKXThuZXIGX5:F13GKmDhp7L1ajxCjd1ajw8nL9ajK4GJ
TLSH
T16EA17D6EA50A084FE4AD0937CD79571B6F69CF0C27FE3767A9DE8A0405B0A5701082E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 336B
SHA256 3d08d2c67fd697a533af133ba1d53cf2a4146ff3770eb79024e8d79e7877ab27
MD5 a8f63423ac4b2e618dfb17fe9a8cbdf4
SHA1 d4a47159dd3ab90c784fbf4b58b35e43c1b96b9d
SHA512 286024f9881e0c2220b440ca3332209d7d72079cb12bd41cfc6ef335031e72572e66846bdcde546eabd0862285d00fbcbb1fa54f74bd51fd6647f210339189f7
TLSH
T1BCE0264039C8D5BF106D80C34332A34FC6F9740BD3CD79821F22D64011C9C087191261
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 388300043058528ad3a241132ce3e6f83890038a5a653df815e5fdca312df28f
MD5 977817d7e0a504a03135ab87b13b5c57
SHA1 b2ad8fd9a30702a659d5cc18d9f289ee4bedd2cf
SHA512 2a23640f788b44f0e8795eb4806cd783d12e5c7eab80c3f59e4b74c15527378d463a013fde95fbe8f10015edd74058c6386d64f27055b3d2ea1c1bba38ea4b5d
TLSH
T111B0121180015502C09302F011C204CCB614BF10C706130253E07976EC262A2D014251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 e40276e8072fde79eecf4889d831d4983da0827b8c8cbcadfb9b472513d1425a
MD5 ada74709287c4fae43b577a05039ba29
SHA1 56fccdac7e3e2a1ae2e302529126b855a7aaa126
SHA512 283362cc441d2cac8b49cace4dc4464bf4100fbe68d2c65ecf5f45d4bfd26748ad590ddab767f419cf7e03b871c14b1e9ca4a3153d2ee9c8d67918d4c7349d7c
TLSH
T13DC09211C7076212C15A03B595A9B4DC7214AAA4EB090B65A2F85A2AA8B7231A11F192
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5881ae.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5881ae.TMP
Size 96B
SHA256 e6c69f85e5bc5d23068619c1b3cb2173e00135f39a4eb5f41b716cd8a0792689
MD5 5aa71d39fc4471292423dfd0d4ee1081
SHA1 e035bfb99bef24b6090608fb393501f313f87fca
SHA512 142b52700c036fd4399a9ea39bc58675a165758fd06341f2bf81a03e5898a8f991dd9da907a6377171f2a65b248a50cec563aa23fde60bcc24594254898aa174
TLSH
T1B1B00255D103A312C14657B029969ADC75B1FF25D7033312A2F01AAFFC397754925260
MD5 SHA1 SHA512 TLSH

Submit Download

Tabs_13422298055083275

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13422298055083275
Size 79KB
SHA256 2b9c702f17e3382caf34a142952291da89fca28a84a77bf9372f1588bf93ef45
MD5 8efdb7351b3129f97aa28438f12445ef
SHA1 9c728ab67d5d856e22050b071fbe3edf6fcf2906
SHA512 b91f62f50187f219783edf9a86117c13421543602b80976a4bac1043106866f6f9f6d76f9a054ce00fe1470dcf5bd283bfde0dd4f60da2b99239695ef80056ef
SSDEEP 1536:5DEzgVuUY8aUYxDUYYDUYCUYO7UYnaIM9Ru:yzgVPY8TYxIYYIYrY5YnaIM9Ru
TLSH
T18D83AF265AF9013EF1BFC638D5F621F2BA75B94275808E5E41D212180D53B02AF71EAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 12da88e9a8245a5f16656e45a24baa1e2d0cbde7145e7d6d3ed0ba932199b3a4
MD5 561d39e8964f7fa965cecbdc2b4a32db
SHA1 a90ead6973876bddb4baa1b16eace56e032a601e
SHA512 e06352868566047da1407d7b9db6bba03802a1f87f2cf0f04ff9dd48b953fd73663ad691e2ee4a73f7042e536d49cb7b2a421ce50f13d028ab2b4d34185f9ef1
TLSH
T144A0021495511065F22413B1D18B1241621C49115102635249D18649BCD5740C741711
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 388B
SHA256 82ba44d7745c956b2bd4c96ab9993fc33f8669b3724df6cb1df7032c651d8866
MD5 a2286ba7549e2163a25de46053e21584
SHA1 f53b3d2c32ca9db8b300ceb35d6b03b590dd74f3
SHA512 723e0c4a9d3aa5576f27b19ce5bf1b46f639f3126e681b28217b3c17e6cf91f952f54a29fb12324df57b03924e0597a9011d50b7e65176d20ae71f6bad79f692
TLSH
T1A4E0D860A3155022DC8F57704B4913567B11D535982017B3C41E966259531B3AEE09A5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 348B
SHA256 72e29a99c898e9aeb59fdfb95389b3ff0dbc68cc66975d2fb61996b5f322e48c
MD5 ccfdcbabc6dfade95190b3920b6f29a3
SHA1 ffb27446320154d71961cb4e18378337de844fae
SHA512 5af041ddfd803388b4fa7d7118f94ea75e8bcc1d8d2178387715ba5d0d0aec8fd7abd9f8e212f8ae33b162ad7312c81aafa33e367b78b8b137044945127690fd
TLSH
T185E0206435C9CBFF108950D79372F34FC5E17406D7DE9AA53F05E14152858487181755
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 324B
SHA256 aa8a8eb1d4ebeb236fc14d10155124370e3a59db9cd0b6e6b91d88c688345164
MD5 7446dc1a26df586b22881bf06cadf790
SHA1 b221fa4bca2e2de8b844a857a18ac0be71f0e344
SHA512 a239102b5593232a4c210a2c74deeea24d51b68fa1acef4baa3a31bffde2d85214d5d459b2c47e89b8018caca79c12ae582c80b569588bc14919ddf8d542af3e
TLSH
T16EE086B039CDDBBF114DD0D38366B34FC6F4B806D7CA3AD66B05A480628190462A46A5
MD5 SHA1 SHA512 TLSH

Submit Download

Top Sites

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Top Sites
Size 20KB
SHA256 4baf4479b170b0b77c3d2e701a37a18479fefa6bc1598dfc22c2c85a8837b597
MD5 70d62aab4787b11184fff022b50ff153
SHA1 46c9f273ec2f1a56a579346ff44e5e5fbc203d41
SHA512 b710f87f51870a89ad3d959b3b71d32c33f4800a4a3bf3c0a082fa5e5f8374caf77cd6639198ec2add8a2754bc102c73947dec809366828d0f9aab915b2ee965
SSDEEP 12:TL17CZhDu6MvDOF5yEHFxOUwa5qguYZ75fOSZC4hQccogBJccogL:TLVCZwE8I6Uwcco5fB84mBDL
TLSH
T1B29210DF5F542833E9B58B39A2C740D8DE3BD21CC3C1EF9480A45C319EC0980124F1A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt
Size 150B
SHA256 b3de37119481673cdf954a73fbc0882f7291b902a12304a944e0e9e466b18944
MD5 a5c79bbb8dda05a16ec0e4f6352cfde8
SHA1 5c520680fc9300bbfc443223a29a2083f027ce35
SHA512 d8d9246e716164c35249f19ef72592fabb0716f6c317c9ad152bae4cdc30c291e079c2910c9e43ae1f286c015403ed29c4c24cb95ec396e79e889ebb30afc929
TLSH
T125C04CE31520856B0E74A9D824287A1DE55795994DD5DCEC9408905615799338802939
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a0e59.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt~RFe5a0e59.TMP
Size 157B
SHA256 9fa9ac51259933431709eb27c432ffbfb7cfdef10573bcfd6903980f364d546a
MD5 f0b1d9a64399014bde9d272fd824eeb3
SHA1 f3553be9665f9bebd188de9d41fc13fee86ab917
SHA512 16e1aeb1f069ef41ac4fbd3c9d47838136b942e2a680602c2e576e25c033f2972fdc493e2a48395717f66cbdcb8337cc895f81e41516ed944c47bbfc4ef873db
TLSH
T1B6C08CE3143005670F34A8C82038360DE1279C494CC4CCEC9408B04620389338801838
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\IndexedDB\indexeddb.leveldb\000003.log
Size 34KB
SHA256 7cb31835fc99a495aa8debfba18dc4530d5e54f1939924c605a15dc413eacf23
MD5 a1b1ff111698e565dd8970f059211ff0
SHA1 9a4835b9a4b6d8402aa08f46ea8af9679c686af3
SHA512 2ff33bf886d8ef106cc005418903325f03be1e6670c585448c5dbc04cc973d76a852e6f5bb57845608eecb05e01251057b6439d7f1e1ef6c3fe3c267cf7124d4
SSDEEP 384:7XlEYcZIbG2AEtPpu5iCighcZIwmk5cZI6TupcmQeqkpcXR8MkC8o:7XEIOl6IzNIUbem6o
TLSH
T109F2EA11A12368B1F43703365B92DF8BC335CDD59B516025BAA2B62C2EFB7882D5723D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 4188e6d341e4cda2d04d38184ee6892f3ce195f6f4f05094bbebdcb35c449549
MD5 9b3ff947a7bba63ef3085f181e769cfb
SHA1 d428662ccee57628bafb891004596edd006e7c28
SHA512 a63aa3922da8fbe37a8ded90fcda3eb3e5c9dddf2a5c78156c1ed2a2b334e8e3f1be7288a0a7852e600aeb879d3c29df54f8c14f3a133d45a72bdc6f6886543d
SSDEEP 96:f7doKsKuKZKlZNmu46yjUrY9XwX4Y+XtXk:7ZT0nzXrGgsdU
TLSH
T1E403318FA61880A2C4BAC539EBD135D9FC791A0C6B52FDD105E907189DBC133828C5B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 24b1a827a1b70ff27c9d384cc5b0e38b8f9e1665d51fe4d13a3f74c94caf188d
MD5 fd924e6c75f0c44a3be3dbc122842164
SHA1 4491ac4cef5b374a6fcaadcc9a3533d9c97b717c
SHA512 9003b99e7a6f86a01b060212ee5057864d4bda0b16f8576c45300821f4de9dc3b71c90c60498b4bc9ad575f7e1bb4e9d823a0545f58557f0f517fbbfa073be19
SSDEEP 12:EikJ+tVsUaIl/AMwNJWFMwWLOqDywXXwX4camLULITs:Ei2+tVoYxwXW2wWCq9XXwX4nmLULD
TLSH
T12102498FF905C089DC1E0479E3A8B48CA4270D9C3E83FAC159D80B0868FC65383CC6BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 320B
SHA256 5c0bb2a27c7281f9ca39255ea0b17c325e3cd84297b94ba1a42199e398fed39c
MD5 1e4ef3decd002cee794734e60e82e0c8
SHA1 6e894b10d62b44ff9ccfa4983c4edd726175ff09
SHA512 dd81237260dce84973f3200f7c81cd14505a78c8612c61bb083106c08c7f408c899a5cd660e85ee646c0fd31cce89bfb8c4b8e89d8291244c7713f3fcfad592e
TLSH
T171E026047AC8C6EF64D8C0C702B5738FD6C43802EBD916EA2F02C04450C080475A0661
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 413ec931ee5a97a0824bf60bb8246b7f4c2e2df86967cfe68f5f41e131ff1057
MD5 4e2cde2d3fb4d3e2c0a65f62ed754fd4
SHA1 0e58951995d29897af55269d36e783d784a96d74
SHA512 d1260b4b2e2ae1f3ced24baa9356d33d6229cdeb04a4840276bf20f8c360f3b4d8c60d40ba07304a8d3386fc237f49da19c7984a84515f025f7693147a84b827
TLSH
T14E21F956F731C504C299867A117E6B650774D4A6CFF8ED0F25B520383E71E141D0B3E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 338B
SHA256 b9aeb595dab555a570d60b795518e5321aeea8c3c3c17e14624725d9bdbb23e3
MD5 aefa3e6b53accc1518e0921b272a990a
SHA1 1c3f7e1150b4fd8e8fcd31a00d9e14cff9ca30fd
SHA512 6479639af5f3c37fe9f86a60658516a34d151fb11f1e82158309c3e9886afbfa4c4b45e5e1ba17bfdd834d628a480a2ba2c2ee9873003ca06fff749c3fb6838d
TLSH
T1B5E0268478C8C6EF409881D302B2F38FC7D03802EFDA2FAA3F02C944518084576A6AE1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 948403753eaaae515daad2db56b5503c9aaae17cc40e605c383306d68fc6575a
MD5 33955aa53fa34edc92d7dea160e0f9ff
SHA1 ec0d3fbe85551444dbfdcc4510426d7ba2742220
SHA512 c5193dd05fb577c12c75f4fe24667b147efc55908e7c56993406c9c3383a0ad7b92729ea93e4281a4b9f8ca9f72b33a6e91fbf94eefa5a1ae81ff96ecbe50793
SSDEEP 3:MsEllllkEthXllkl2zE/lD:/M/xT02zE
TLSH
T1464404047FC00D17D7103130C053C3541774D410071377433C7544375CCD7500D40141
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 114KB
SHA256 3d624010aaa4e96272c9d32aecaa01efda9384d1c32660aceae6e3661c52bc2c
MD5 fc5e3aa9254399b160199c3e5b867cf2
SHA1 99121266f0e159ffa3ab1992e6171cd6e23fc617
SHA512 1beb96f1a7b0959615c54ecd44d74324f3a93b76102f9270187af28f6f4ab2e4a59e99f1e9a942fcb4cfa3c11186b934ae546a2799770b51a8d3d74a049c31ac
SSDEEP 3072:scSmW0SJALlOzFpk9UyD1LF0u8J3kXLyZeUJcirRUhZtM2:/SXqlBiyDMu8J3k7BUJc86Hq2
TLSH
T1F5B312732E87242320AC1B99314B38171FE68D865E5E7DDC8BF05BA7099B3E12797D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 114KB
SHA256 05417b84083978fa16f930d1d0de71de1b42aa83c1c6e8479189028299385314
MD5 a4f3af4492c7d246f6746e2b32f4c111
SHA1 87f573a6e345037f12dc11460662d31d3c643846
SHA512 9dd0e8445efe123231880e674c38a9876db97f5a71b9600a3f977146175dd0213530ded0f2a1de7f91165b0c0c3d0a212d1c560d983b3682288df23881ae4226
SSDEEP 3072:nc6pW0SJALlOzFpk9UyD1LF0u8J3kXLyZeUJcirRUhZtM2:c6+qlBiyDMu8J3k7BUJc86Hq2
TLSH
T1BDB311731E87242320AC1B99314B38171FEA8D825E5E7DDC8BF05BA7099B3E12796D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 114KB
SHA256 cdf0ebb070c03b50b6224a93474fc40d443a972c75bde7f4a11ada88834c09f7
MD5 9fbee884e63ac3dcc85c80173fe92963
SHA1 942360abb953fb3dc149dc43ae6913fccdeb3c23
SHA512 de4166b91347f4216b12f3eb22d01e4abe518479be8ef81818d5fab0b9dc9c0225b574b3544005eab0fad4b11b5fcf30bd2e99eefcd0952edfe737515d38fde7
SSDEEP 3072:AcSmW0SJALlOzFpk9UyD1LF0u8J3kXLyZeUJcirRUhZtM2:zSXqlBiyDMu8J3k7BUJc86Hq2
TLSH
T1F2B311732E87242320AC1B99314B38131FE68D865E4E7DDC8BF05BA7099B3E12797D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 59e8f65ca58bb4337086999b4dd3d90eaf98615df3cfdcb7b493c9ff0c2e91b1
MD5 3dcfacbbf8d61d1284b8c84cb8fb34fd
SHA1 538ba1e27ecf0a79cc4fc289b945a947135ba679
SHA512 b026257ef2338319b6d299799a606a6dda932e179b0b63c685d0331c31e79fd9f4d6cf02c11ba5b073d72ec0eb9a9bcc03789984c5fe0d4fb750cdc386eecbb7
SSDEEP 6144:jdqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:jIlEN3k7GJc86HyOMWS
TLSH
T1BC1423A65F0B3832219C97AA210B7C5D46E38CCD1A1D29FC12E15BBF19AB3D2735BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 143fb88c6af8c61db3d5f9f578976f48a194611221946974fffea1e194dd730f
MD5 2c71226bb075ac912b15bad1ecfa9016
SHA1 0a33f1a66485b680b68af92968fd5ac50ed5e1d1
SHA512 f0fb0138785a49964465a7fcb2ca196beb0e4148f3d16bd288a231fcf0e55f02ab43ecf5269682bcd14f8e822c662d0630813c06daecd53af6ffe5aecb783cbc
SSDEEP 6144:oxZqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:o+lEN3k7GJc86HyOMWS
TLSH
T17B1412B65E0B343221AC9799200B7C5A4DE3CCCE1E1D79FC12E15BAB096B3D2A35BC55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 114KB
SHA256 1f0e8149b9a523419c9a154f0eea9fb04226b7f9e99a88e340027b23510eab84
MD5 2b77aa31247cb7cfcc2e5c65cf9d11ce
SHA1 9ab8b636a1cf1076c15d6ceee900726845140df3
SHA512 582488959b48a0cf6744f13afd468e783adfcf711669f4505b40a744ac5c72b3494ed19534209b998f97282f3d0f02c035f265ea6165baa2ed5969f2c090f7c7
SSDEEP 3072:TcSmW0SJALlOzFpk9UyD1LF0u8J3kXLyZeUJcirRUhZtM2:oSXqlBiyDMu8J3k7BUJc86Hq2
TLSH
T115B311732E87242320AC1B99314B38131FE68D865E4E7DDC8BF05BA7099B3E12797D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 efc7fafa3d73def41bf5137b4839e4e93ecc4d37dc24c0e5412cfa1734fdd2d9
MD5 28fb4f97805ce7f5240824c80785996a
SHA1 2554d1519e48584a841aee4420bb5280e6be9136
SHA512 570f3f0df76774eac873123c3239ffeb7d1548bab0daf78fd6655a5e2afc5605902d732aa88be40fcf05c27b98273f9d1f03b58040de3aa7040b96755733dac1
SSDEEP 6144:IPyqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:IvlEN3k7GJc86HyOMWS
TLSH
T10C1412B65E0B343221AC9799200B7C5A4DE3CCCE1A1D79FC12E15FAB096B3D2A35BC55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 228KB
SHA256 0529a11e0dc346b14dec0aa95d6e4e36484fd02ca1ecd417debad3f91192c6a9
MD5 9f5da7f8a8359a11d57257b04d83b48a
SHA1 aa4d66ae1e5b5e46cf29d0eb4758c84e9cb1db4a
SHA512 babb4be38cf8468c7fc744789781f377cd84b042abc575638328dbf6414a3b185a78c064a1db5ed522ed50f1546d5dda1064bb038ebca0457cf405922897095d
SSDEEP 6144:IclH0hqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:IclHJlEN3k7GJc86HyOMWS
TLSH
T1013412755F0B3C32216C5B9A21077C694EE38C8E0B1D79BD42E05BDE186F3E2A65BC51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 114KB
SHA256 f9d45f22ba4e1acd533f03afa01e2d9dad5dd7397698cc4921ee15f808a76e52
MD5 1a738d1013978ef136f9c7b539ab361e
SHA1 adbcabc07a9e01d18627a6ed4c079363077e6375
SHA512 75f1b3b51739c33dc0c23896bd726d4723bb59d1041df03d8898cd7dedb8f082059edaf40bb2ee12073cad6d3fb04888abe7c36104942db64255451b109d4363
SSDEEP 3072:LcSmW0SJALlOzFpk9UyD1LF0u8J3kXLyZeUJcirRUhZtM2:ASXqlBiyDMu8J3k7BUJc86Hq2
TLSH
T178B311732E87242320AC1B99314B38131FE68D865E4E7DDC8BF05BA7099B3E12797D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 de84354deb3bda8288a55966e81e2dfac63acc80d3dee418512a6004a91a7922
MD5 80ede9f34bfe068933c66b22c89a1d49
SHA1 0f55f80e37af3f7764647d55b10f798fc29955cc
SHA512 58c09205d6dd76e14e86160b881cf07a18972986174198252b9202e7b01e245e5ffd72547677726dde89a4a5e9992f70c7529c0f85d2a433b9a11d6afec1f3d2
SSDEEP 1536:eGnMoP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNM:gu++J3qUQm08KMWF0bFTcVHr6zD
TLSH
T1DD9312B9991E7D75636AC6D6A0079DAC88E3DCCE1514117C30C7AF1E18BE393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 7b61c3ee98ed85a97fe6dfd96e587ff0f88ef760305d6f15e2e2d0240826f9c9
MD5 f71d19accb701551e8fe1c3f7225c008
SHA1 f07cef2af00628d27050a6e76eb50078ca6c3b67
SHA512 50a066da7572d17a885ed247f3638236b784ac1f1167515f139b4282df2b04412b6cbe0764a221ee06c047714d567d5cb9784432f387190a833a5932fa57e8b7
SSDEEP 6144:ndqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:nIlEN3k7GJc86HyOMWS
TLSH
T1101423A65F0B3832219C97AA210B7C5D46E38CCD1A1D29FC12E15BBF19AB3D2735BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 a42829ad2b679b341c86e24dc054c6a7eba087686850d7dde25ccad5e803fd47
MD5 d525fdda33b556afee15c296ff91608b
SHA1 080d1bf932d3e79bf196f8be185580ffc36b1289
SHA512 c11e727efd683fcd1e6fa305cec07d1a601554df0c389b85ad72c7946df19096f581ccc8239225e8f3a58a36cd8ef506f4fae4690bcfb484f1b575c0a6251d0e
SSDEEP 6144:3dqlBiyDMu8J3k7BUJc86HqL++JjcMW2VcVL0:3IlEN3k7GJc86HyOMWS
TLSH
T1E91423A65F0B3832219C97AA210B7C5D46E38CCD1A1D29FC12E15BBF19AB3D2735BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 142KB
SHA256 d0e311612b8fbf50704b2d6bb3b7038ddb9e339a372e0ce1f9f63e94c397e341
MD5 e265f2fe0c3e16b5f4cc3568fef9a99d
SHA1 56a3dfa10064fc7cdfbe8abc07c2e71e653a7b0d
SHA512 60cfa9ac91de8398f37deca496cb48194a18540544157e01a96a07dfd1bf613efd0d3b26c22bf7db935e263ac60471abde1c4da81f1efb6fbd19e24299032c47
SSDEEP 3072:x5JlHeW0SJALlOzFpk9UyD1LF0u8J3kXLyZeUJcirRUhZtM2:xblHvqlBiyDMu8J3k7BUJc86Hq2
TLSH
T166E312655F87192320AC6B5D324B3C2B67F64C500B6E7DDACBF047EA19AF3D12796802
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 2e64bcb2455072e4abfbe1c765bcb16c8f62b9990687d38e28db384444d24812
MD5 eb6c05a2e8841f67ade1009e66a54a5a
SHA1 6c2dce9a7430eafee69171167be14c40d2cf703d
SHA512 40aec8a715c68c839864ceeff21d1288ef5b13ec484adac24ed9d18fd165ef2f6b1bceeab10fde75e2e14a6892c750924fe113e072283d56246941492b21301a
SSDEEP 3:MsEllllkEthXllkl2zE/lQh:/M/xT02zPh
TLSH
T1BC4404447FC00407DF4031344051C3541770D41407135747355544375CC57743C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 48KB
SHA256 02cc5dd6dacdca586dfd7c6366954ad8fcf810706ca22e9a0c89c1363da910ec
MD5 0b4057fa4692ed7ccfb85484a16e2793
SHA1 150a7e97ef5e0cbdd11cf3fc070debec3ad9378f
SHA512 e2bab6427d78f5fa92afeaf1a2929e12b654e963ebeb25879f742ba305d05817232c94fb0bb211efd5aa79e71023d7660d8589eaa98ffda914f71a2411bca5ae
SSDEEP 48:TkkhCU2QB2zbBxxqy8iq6EiInXbJzgSiSv9MaI67nEqY/8uZF7jzlLkjzlryr0mM:QUcfXxq39Uyvk/HjzlLkjzluw
TLSH
T12323848F16595198E585183EFAE34840783E1B5CCF1BFAC891F01DB11DA09AEB26E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 16KB
SHA256 c2ebac2c79aba4aa16a1282d3f27e1e6018e70a0e7a883b0ec9d5dd3c818232f
MD5 bdef63dd7e55a2ceff1562e40a04c8b2
SHA1 a9272d8ae65e19bd5d5b79e566a145229d0e3c00
SHA512 9119bd03dd04a4d70daf4e780199cc49d403ff86bd386a19d6546cb5a5bc4c8d43b71dbd5ad6da8a33862641724ec429b838927012c61b7cae9b8a1d0f8d9a22
SSDEEP 192:Si/9tuHLet6EPgtNUtF27t1fAQFG8tJCtjZtn:S8t2Let6EotNUtFUt1fAOG8tJCtjZtn
TLSH
T18172AE5167FA2516F2F3DA36A9FA33521F7EF8129B199D4D4290430D0872B10A9ACF37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3968-0-0x00007FF6F1610000-0x00007FF6F1658000-memory.dmp

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads