hxxps://sandy-gear-02776780[.]figma[.]site/

Analysis

user interaction
yes
max time kernel
299s
max time network
300s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/05/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sandy-gear-02776780.figma.site/
Sample260506-phl2daet8n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1340	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134225436197293402"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
4876	chrome.exe
4876	chrome.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe
Token: SeShutdownPrivilege	2028	chrome.exe
Token: SeCreatePagefilePrivilege	2028	chrome.exe

Suspicious use of FindShellTrayWindow 39 IoCs

pid	Process
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe
2028	chrome.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 3128	2028	chrome.exe	86
PID 2028 wrote to memory of 1340	2028	chrome.exe	87
PID 2028 wrote to memory of 1460	2028	chrome.exe	88
PID 2028 wrote to memory of 1460	2028	chrome.exe	88
PID 2028 wrote to memory of 4956	2028	chrome.exe	89
PID 2028 wrote to memory of 4956	2028	chrome.exe	89
PID 2028 wrote to memory of 2964	2028	chrome.exe	90
PID 2028 wrote to memory of 1204	2028	chrome.exe	91
PID 2028 wrote to memory of 2964	2028	chrome.exe	90
PID 2028 wrote to memory of 1204	2028	chrome.exe	91
PID 2028 wrote to memory of 4544	2028	chrome.exe	93
PID 2028 wrote to memory of 4544	2028	chrome.exe	93
PID 2028 wrote to memory of 4120	2028	chrome.exe	94
PID 2028 wrote to memory of 1796	2028	chrome.exe	104
PID 2028 wrote to memory of 1436	2028	chrome.exe	105
PID 2028 wrote to memory of 2380	2028	chrome.exe	106
PID 2028 wrote to memory of 4580	2028	chrome.exe	107
PID 2028 wrote to memory of 4580	2028	chrome.exe	107
PID 2028 wrote to memory of 848	2028	chrome.exe	108
PID 2028 wrote to memory of 848	2028	chrome.exe	108
PID 2028 wrote to memory of 4192	2028	chrome.exe	110
PID 2028 wrote to memory of 4192	2028	chrome.exe	110
PID 2028 wrote to memory of 3876	2028	chrome.exe	111
PID 2028 wrote to memory of 3876	2028	chrome.exe	111
PID 2028 wrote to memory of 2960	2028	chrome.exe	112
PID 2028 wrote to memory of 2960	2028	chrome.exe	112
PID 2028 wrote to memory of 4876	2028	chrome.exe	113
PID 2028 wrote to memory of 3688	2028	chrome.exe	115
PID 2028 wrote to memory of 3688	2028	chrome.exe	115
PID 2028 wrote to memory of 2336	2028	chrome.exe	116
PID 2028 wrote to memory of 2336	2028	chrome.exe	116
PID 2028 wrote to memory of 2896	2028	chrome.exe	117
PID 2028 wrote to memory of 2896	2028	chrome.exe	117

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://sandy-gear-02776780.figma.site/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8b77ac728,0x7ff8b77ac734,0x7ff8b77ac740
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,1413544400722302206,1795611510706406740,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,5582688296870723613,6168727601950834459,262144 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:1460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,4014722340254440332,10308051216895053720,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3172,i,16764483848759269318,14717094591674958965,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3176,i,2771292584388849705,1055297063884654467,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4260,i,5532094433685390233,15930972441970089726,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,8569475043276352086,14072692463544381368,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5404,i,10760715098595534830,4944659410712403243,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,778360513639524578,3376937274472284479,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,14756392441612262424,13882355554295931265,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4312,i,17319798131967151867,5989235467747089966,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=732 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5776,i,8328605744886167303,6457077927920044293,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=972 /prefetch:1
  2⤵
  PID:848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5868,i,3083176632234914147,16400665559484564948,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5900,i,464661964245081825,3176504150528903329,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6344,i,2697412994941794123,17354247926102950589,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6280 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6648,i,14113413524297459521,7718566905032080698,262144 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6672,i,8663907260804319138,12717373918960146561,524288 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6704,i,15903170215204890650,6683569253450855951,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6848,i,8604448369330208625,16591981331210815246,2097152 --field-trial-handle=2040,i,13786168648149631747,2424947768411158746,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6932 /prefetch:1
  2⤵
  PID:2896

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4992

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 36d37a4f3db537588ec69a489da93506d94c577b4f53bea7ea39c3462654b28b
MD5 789544b272d42a7ffe9a443caab0aa00
SHA1 d378b39df3fb41aee2e3a60ec3332cd08fcf162a
SHA512 fb02fa3810689423f9c391285e2090241ced98a502159a41f4c729bfb827bcfcadcf11953f8fe742392051a49b9db58f49204b4140208cbca1223731290bb151
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 db42130e80a6e7a25004db1ec50c15d752d5a3b538601d3b2b9346199212c66a
MD5 d93ab52ad01ed7f88447ba7636cf72ab
SHA1 4ec3205a8f95c2757a75e9210d0626b1b610c870
SHA512 e12daed20c178159267147ca3fb275995f438a42d6cdf6172f6b7b015dc22e2a2550f4dc9c2edc2ec9832e83ece50180ac665d151b9f319bed28043a93e003b9
TLSH
T10AE02B9AC925EC3B19FD0B1960845385EB04135717819A4F3A3C820C8FB027A558695C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 20KB
SHA256 d6b61e8c88e8cc9f68ac4a914301687bfe6459a306fbc068c4b86d502829a43a
MD5 35f6e927b743e5c51edc69e69172b68c
SHA1 55ca6147aebdd8e6736337bc55b4ec4a7eaabd99
SHA512 b37ecdab691c2934c3597231a61bf6f87cc7c017a156c6bc1031200c6400e2d79054fc337d2dd71b38aece7f8edb717580452d61115482e63a862e65ac287b37
SSDEEP 384:ykoehdcUKo7v+IBUWQYWwITdl7oyT1nwWAriBenbt/eTK7jl4:ykBOU1DZqYRGdeW+Jicbt/I4R4
TLSH
T1A092E147933F53EEAADE24B0474D7FCCA522BB574F8A154C0A19E30912807896C7A3B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 59KB
SHA256 0beb2b49eb3c530408ab26d852f699cfb133f7c45e5ddfab26be9f506c30d552
MD5 e6f9c2d5a74a3e5d1f4ec8a81c969438
SHA1 a7e668dd69f695c84901bc7f326b5b3fcc7dfad6
SHA512 38903301cfd9a77d72f621b5a9ec8c4756d5f670376f08fc601288e295e2cc161e14e08a30cdc7c8c97fbbd4ac996cbae95748bb7e11429e06df7c6b03b27985
SSDEEP 1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzQ:fq1HoUBIpU5TG7JSmwuTe+8
TLSH
T1B45302AF9BC5FDA5590C0AAAC197003156297BF251FCF0C880C372D598E127F70AAE78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 c08a0887c46784b40df88b935e97c14d8047332a55c9fe595090a33af0dfcf61
MD5 3aca6d837d66694faf6a484094690adc
SHA1 dbb7576e36c7abf74c23a5f3b53761efd8f74fd3
SHA512 89740d03cf0c741e0d6c993547f1c253e58e11dac2a3e9338eb49b31fcd8bea633488e06a8451584c2cd028b2121dd127e64163dc4eac80b398b2c38ea4d164c
TLSH
T1CFC0922832DC0671CF644A31A28A1DE430650E89182A679BD1B0009AA016ABB8860181
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 9322c1fa724ecd40ab7292996aed7b0c00e11c2efb5b290888ab84fba1faf150
MD5 8e38a0fb1719fc7850d436b6a31de8af
SHA1 1b77bdad63ad28538bcd5a080834e93f2535703e
SHA512 2899fad4a81652d03b7130522425591279934f784af7e66c6a990be0175cca2182c62170fc41c1f548a5d5b510a1aaba674796b8d30ac501eaf85e9ff8948df3
TLSH
T196D0801011CC05B1CFD019703DC91CC4D3E51F54243D275F8270205545431BF4435251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 4fcc7f3d07db11234bb0cc7367d92bd2ec061b3543ecf884c208c920be2a6eca
MD5 3dfb2020616222e031a4edce5cc9fdcc
SHA1 137438f866ee72d2457edab1f958fdaa504f1c4f
SHA512 32e18e583da60c7ecf6ab1953814de30a3d602d439da4df1aa629afaef49a1f4665ea4e2a94a87e8de9588e91a1b757e2b80fc0030acf3585b93b1f975acba59
TLSH
T159B0126033DC0931CF40053132861C4021600ED8003E27EBD4A0008A44036FF0130341
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 d46f2132d60f8cf42bdd234224febe58806b290427d92dbf091d3880cee07109
MD5 13de9117dea024f08f9f75a6f6aa95ef
SHA1 2e5ac527946f9d2118a93b5002883f29e0695873
SHA512 f09653ae40bd9b00893316a51b942a2282081899c4a4e7f84b91f36840a5147685c358d27bb09841f24bb7f8ecc2eb34c422977259efb86f30fe00708ea7c374
TLSH
T1B8E026506CD84AF1CF9059705FC89C8AA2A11E95445D3307452420402123AFE8115110
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 c4c156af67c1b289c12032846c7ce1052eb56fb0a68e8428c3fe15a9c31fe5a4
MD5 825fb27cac2be3d314bbce0643563ff7
SHA1 14ff9fc68b672917b699639d4c337cf32a0274a9
SHA512 9a15c87fe828c4e787d0493b87b4a80d9e1574286c2f37c01133c7df1fd1616cbc7f3125d28226747696e6618a812d3798d118c44292d13c20493658dbb7a2e3
TLSH
T173F0D8246DD88DF1CFD01DB09FDC9C87A1D55EDD456E375B412821641013DFE8C65100
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6f2cfcc7c7fe51825d382e4a4cd6b30b6f4ca9e7b13c0a3bd71c598e6dae815e
MD5 78c6eb07a5a3027a9965af66b30c73a3
SHA1 6eceaa5c8914b11bdf86a582c5e3a0b1917b4257
SHA512 d285ba91c3aaff9935a108af431ca2f9d65514dc22e11858fad8de19fa95bc205ce110173a2927bc5dfbb07f6003ad49d959fb49d77249d56965e2c299057ff4
TLSH
T1BF518BF793B48A7EC61196F4EA256F2FDE690525035C3C6689D4AE0B43F2972E10078F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 88f3b8e5e55e7ba4afbc1f1f4e6b61ca94fd09c23d07b59c0b0406acab559227
MD5 79a2b9efe2fe29c804ab911a2a6ecb4a
SHA1 e0548dc471155a3ac27c25ee3fe7c66a3601be15
SHA512 9e17c2141f5c7601e8b6bd09f93fd70dc6a7c9936b43d402a085fec262ae98cf84f61714ea48b8909211a7406b24ece154ee7c35f5e8656a4b37d818219f811a
SSDEEP 96:Du4BTBnBlBLaIaEg7UZkoa1IPzB1juBiLfBiBMcs51Ek1BYXk:Du4JhX9aIaEg7gUePzBJuCfE+xiMKU
TLSH
T1CBB1AEF3C3F5866DC91196F09A146F2FCD690964835C386A89D8AF4BA3E25B2D10174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 17f00b65d1f054a066d2bd5fccc6f6650bcebeba8c890695605189079d96589e
MD5 6d581e24525793eec48f00314979684c
SHA1 659698846ba38f42e74af43fae62387d3494b895
SHA512 169c4a203a910ea13ec82e137a343f0740c3ca463dfb652dbb4046961e52a576cd04bb5bbe561b2e56053969a3db084cafc37eac23a9facb07c633c611ca924c
SSDEEP 192:Du4JhXl3aIaEg7gUePzBfCf7ujhnix6qT9RHyKU:Du4JhXl3aIaEg7gUePzJCf7u5ix6qT9u
TLSH
T173D1CEF3C3F5866DC92196F4AA146F2FCE190964435C385A89D8AE4BA3F25B2E10174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ed8a488ab80278cf1da68a31acaecb9a6483c5c015393e2d80200d5296426536
MD5 45e731905587078376df454ddef3fd08
SHA1 20a437800903a475898206b847ed550e72f3ca21
SHA512 9ccaabb1dc7e593a605daccde2d22df2b37048ee654ef00c4d81760d883122127dc158fda5bc643489f72f174042eac792c4e051cc0a267a6834b911a580d0d7
SSDEEP 192:WRpE2eZRSC1O3v7rpaPRpAFCYd9+Hsb+WNnOrMblbeAs24eWMgXa2VyIsnAUgE:WRpLGMffSX2EwWMlep2MMMaOE
TLSH
T13452D82EA9187A3BDDDBC62AF9257B57E7F5102171901E44E6FCCA2C10D79CD221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 027c2d57f2cf4c852953b7eb85ecffeaa59ebe375f4eff9ec95f753b1a30aa56
MD5 570e498f0c734b904ea1480dd229d086
SHA1 5c84a63d91ecf59e601b30ca2ab05989439eb448
SHA512 6d9daa1907ee89a486c04e9edafcbe088c388efe07eb378536f002e6227b38ad5ef164e1b0403233852076ba79f59669c3d973b0bbbf99facd4d59ccad6ea37a
SSDEEP 192:WRpE2eZRSC1OEv7rpaPRpAFCs9+Hsb+WNnOrMblbeAs24eWMgXa2VyIsnAUgE:WRpLGMgfSXsEwWMlep2MMMaOE
TLSH
T14652D82EA9187A3BEDDBC62AF9257B57E7F5102171901E44E6FCCA2C10D79CD221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7bc09d2c77e127c1cab808cec403c70e513b39915b9569f49891db0f226b6dca
MD5 d913f2a5eba6e7efec7f0b8af97d4905
SHA1 2228ac697e54b9950b2c7eca78513c3cc13872d1
SHA512 2ec102864c6e22f17d10fa4f597d9215c8df63b5b7c533b0e4385195cafe71be568aab4963e14adcce9e79d81a979ace5da74458b9da196f6fb73a89b31182ba
SSDEEP 192:WRpE2eZRSC1ODv7rpAPRp2FG9+Hsb+WNnOrMbM72is24eWMgXaNVyIsnAUge:WRpLGM7fUXVEwWMI2H2MMMabe
TLSH
T10C42D82EA9187A3B9DDBC22EFA25775BE7F5102171901E44E6FCCA2C10D79CD621702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ea7bb5e49227e1c9246d2484275a31eecc8add0e7449522456aa6290865cc8be
MD5 197e39bb9a161dfc8da49b8d30bdc5c4
SHA1 d376f735ac826e593027040160e5505bd8aa4790
SHA512 0ad2860fec17c14461a8e9b5d1757f4643e38923d6c3188413404cc04aa4b84321e7413d133e59c1a99300974ef486b9b60acfd5a4ea75717ba1dfe252f9324f
SSDEEP 192:WRpE25ZRSC1ODv7rpaPRpAxmCEW9+Hsb+WNnOrN4Hpblbets24eWMgXa28yIsnAI:WRpLjM7fSXaEwWOple22MMMaRE
TLSH
T16C52FA2AA9187A3BDDDBC529F9157B5BE7F5102271901E44F6FCCA1C20E75CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2b67da26732caf788c22ba105c9a6f277471b2aa900249a4d4b37912c2961de1
MD5 e1495a6b271526db2b51eb3da921ff35
SHA1 0a867c46a967bab0d0706744a4427208e1e5e8b1
SHA512 c96d0edb364204866999b7841be9f8496dc82b15a2763ceb580cb8bd22b9cf5b45c21a74776007b164450cdba81aa552b10797cd2aa3d69f22ea0ea4ebe6fc43
SSDEEP 192:WRQE25ZRSC1ODv7rpaPRpAxmCYW9+Hsb+WNnOrN4Hpblbets24eWMgXa28yIsnAI:WRQLjM7fSX6EwWOple22MMMaRE
TLSH
T18752FA2AA9187A3BDDDBC229F9157B5BE7F5102271901E44F6FCCA1C20E79CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6cb7e4a697ffa678c8474df43e1614aba15193e9e15ed7b94fa0ed544277c108
MD5 fabb02195aa2a2391a49710c425a49d9
SHA1 cad749a296db557d432b66c7c99462488afe3fe3
SHA512 d52d8a7c654ae5fc05b0e503a8f434a44abc652256a5e6b8b2cb7871f3ff9f685383e54b627dd558fd338a1fbc60a0a6565ce64467fd8f761fb038e5548b1be2
SSDEEP 192:WRQE25ZRSC1Oev7rpaPRpAxmCYi9+Hsb+WNnOrN4Hpblb3Ab2bs24eWMgXa28yI4:WRQLjMafSX2EwWOplS2I2MMMaRE
TLSH
T15162EA2AA9287B3BDDDAC12AF9157B5BE7F5102171911E44F6FCCA1C20E75CD221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7ebfd1df5cc2621eec1de266d2e534e64a4d55bfb0532b69743b505d3f9f00ad
MD5 af29a10fcd3d585cd509297623b5f51f
SHA1 c142e555386e4e5b1101f35700811e2313e4b373
SHA512 38d5825222bcebb24a97393fc84f9f3c3618d5c90153c4647857c95a749640aedf4eea67e4977b871808069410bb6eadab7be011bf139ec8f6ccd6c177aa8875
SSDEEP 192:WRpE2eZRSC1OY8v7rpaPRpAFCYd9+Hsb+WNnOrMblbeAs24eWMgXa2VyIsnAUgE:WRpLGMpfSX2EwWMlep2MMMaOE
TLSH
T10152D82EA9187A3BDDDAC62AF9257B57E7F5102171901E44E6FCCA2C10E79CD221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4c5dbe3f3071c1cdd70e39a99dd2a8e7a0233b08f2fef9e58bef03d6b9f0f954
MD5 eaf45e095eaf8d2e1b455626d5895959
SHA1 23bbb40f8390c77932f41805e60e5023c08cbcfb
SHA512 92ecc61b66421f057e483c277097699444f9b664b973b2ed4406a72d4c026914714c5b5c5496330675ccc8e112b23772dfe4e83882fbc0b2de5ba584e72837e6
SSDEEP 384:Wcji97KxkXqKf/pUZNCgVLH2HfgslE27pLuLcifU1XODid+ErU3+NHGSdTFO:Wwi97KxkXqKf/pUZNCgVLH2Hfgs227pA
TLSH
T1EB72F8676C0C9E3B4F98C68CD9267F4FACB5014B65EA885493FA982903D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 120B
SHA256 1e275cc73e4cbd67de6cbb9c9dafb18dcd9f724201260ecc5bbfc44bc0b6f86a
MD5 331a0074e23301314cf0bfb0186b7519
SHA1 ca582ad5c0459de4c35d8ade429f105ab285b65c
SHA512 390335a3aa2a6e9223f3e62339a5aadbe70cff7b6c6073abe267439c1f47511bd88ce0ec55211c320c14c7c8fb95bf9744090caf4e4d5d3cb74ee7a24c86826a
TLSH
T14EB01221844156E1C08302B01582088831146F10CB05270153E069B2D8367A18118551
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58991e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58991e.TMP
Size 96B
SHA256 3856f236da96c4f1506932215f9491cd15c09491ebf16e42e3a6fdbff1270b07
MD5 e55a49087317b02835fbe277a2d610bd
SHA1 e8b1662d1be51cf335bbf42878e146ff11544562
SHA512 45be0a7e5d8373362aa3f03dd8a75e0aa3ef33cdb217ea15374bf1032a5dfc3fecab1c35ae4e008bb2764671e5a657a685bcaad409beb989fb8f66e407978ac7
TLSH
T13BB02208C003232AC0820FB0288082F83230CFB8CB03020282F02A22CE202300032830
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 559af1796fc37d1e4d845ff2db9d2352a7146e029d6f45ddcb5648579e54fcd1
MD5 138fc8ed5c1f1d8f1e699e33c6cee780
SHA1 56a8b5b187ee0957ed682f2c63453677ef9ff850
SHA512 ca0c55d65bae8b12178a265bc866cfebc7f79d617c8dcb4a0b06b70af40acb58c34e5cc88d29af2ccc2487c606c99817ed81e0efac46e83e96489404632e3b9a
SSDEEP 1536:OVSAhJcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jRu:0LJ3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1739302BA9E1A1AF799BE5A82B65A780DCD12130E706F688C719C534C21D41CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 d6e49fd6dc72a307b89153b22489be51ae0024e5c8d9a70c278dda57bd8ecf12
MD5 d500432490038e5d8c6dcc158d96d921
SHA1 474519b32e2c0971c2ef5d9e444185b47cf5821b
SHA512 a9e710df37d67f7c597e97f44c54ac0b7859b071598bc97ea72367cd7b8f662c2949416f253ccd2f2120722fe45ee0e932322dfe40b656ac30a2deae32d0769c
SSDEEP 1536:OVEAhJcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jRu:09J3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1CA9302BA9E1A1AF799BE5A82B65A7809CD12130E706F688C719C534C21D41CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 db6b897330d4c40d99798900ba17080fa9c4d50664d7c58cfc032711825ac8c7
MD5 177a16eaa5ab5c68e859c7d1bccb4e04
SHA1 8dbe1234c5bd9e0f67bbe482c4c74effac86004f
SHA512 f10b5409af4a3edcdc0f5dca91b8d45c7088e7c2a4b874eb0b1203678168033c1d4768b40a1fc7c11165a8e2a2d3f96d118de1dbf48df07ecc8445a214d86ed8
SSDEEP 1536:OVkAhJcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jRu:0dJ3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1AB9302BA9E1A1AF799BE5A82B65A7809CD12130E706F688C719C534C21D41CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 f88dea6b7c9e80d8608b2087feec4bb09ac089ebff059aa09f7cc05b3b0cebac
MD5 c8a7a943dab0c7294ade6532d6917d4a
SHA1 9a85981b02ee91bded292d211d8d8ccab295113a
SHA512 c54d34a97f8bea02215142ac5050a81972233a5a3dc8eeabeddb5fd3ad931b2dfcde80dbf910360ec701717c89701edfd855d54101289bac43cdc36a6373e36d
SSDEEP 1536:KVAAhJcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jRu:Q5J3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1119302BA9E1A1AF799BE5A92B65A780DCD12130E706F688C719C534C21D41CC2F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 00166935fd27f3d47c4f2d8ce539f4e341bce11c7ad82e5a31be0638fe32033f
MD5 30f5dff3bba3b6cd1bb6bdf707857ad8
SHA1 eef9352ceb2d4b2eabb942315d92d7fde7002859
SHA512 4e74f29c6d22c8c28f28fb1f5cb7980db85c00490cf4b72f28314222e37714ca9a8ca07a8564effa9fe59a373e28f914feb95ee4dd968256ed20798ab9af1e5c
SSDEEP 1536:KVEAhJcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jRu:Q9J3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1BC9302BA9E1A1AF799BE5B92B65A7809CD12130E706F688C719C534C21D41CC2F63E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 cfa854fbe9abfa263cff80e1879b95a6953c90f2bd031c882a57b3455a55934c
MD5 fdd8d8cf3b3deca345f2bed380bb3e9a
SHA1 3483a31f13302fd466805b84caf3e065f35d1c84
SHA512 a53a9217f800d99a7ea42688217b24056daaf1193b48ae87868c136e6f2c14f19c6e3623ae4d4a7c269fcd9329712efcbaaa39ac712e03a8d08bb79018198b31
SSDEEP 1536:jVncYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:xn3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1E29302BA5E174AE7997D4A91769A7809CE12630D706FA8CC315C638C61D01C92F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 4f8f5b40d8202d4e2295a8c54e41a56f72798698d11a528ec1662d7eaca3c61b
MD5 de2a309ae981b32ea18774d516652a63
SHA1 96051a108eea3f98a073e6c9accd874e5029d396
SHA512 44f86eaeec6bf3916f104d38e7fa9c8a9bba3951fd359838305712cb56c89c1df8a0e38eee11f46c33c24efe9ac96a09a78deec98c7f6ea5515e6d487f57bdc6
SSDEEP 1536:XVcFcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:F63Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1A09312BA9E1A56F799BE4A91765E780ECD12134D309FA98C719C538C21D01C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 53e6f0fe7d39c5d82c92711acd9e1836aab0d07232e030cd59448a19293099ae
MD5 0b277f1720801a90d201b85e37f57a91
SHA1 45f56635fec1a737f3f66c2de72af23fe49e7636
SHA512 8bbf810d2cf15a5f2de3ec3580cc421ac6b89fe49cd6b8b56fd6123d59d11c47322855435fc5ea224ef48338e4c1ac087b81457588789fa92689091e0c536c17
SSDEEP 1536:OVcFcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YF:063Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1F19312BA9E1A56F799BE5A91765E780ECD12130D309F698C719C538C21D01C82F73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download