hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
900s
max time network
894s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/05/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260507-vrxgcsby2q

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3372	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134226476573047489"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2452	chrome.exe
2452	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe
Token: SeShutdownPrivilege	2388	chrome.exe
Token: SeCreatePagefilePrivilege	2388	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe
2388	chrome.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 4976	2388	chrome.exe	80
PID 2388 wrote to memory of 3248	2388	chrome.exe	81
PID 2388 wrote to memory of 3248	2388	chrome.exe	81
PID 2388 wrote to memory of 3372	2388	chrome.exe	82
PID 2388 wrote to memory of 444	2388	chrome.exe	84
PID 2388 wrote to memory of 444	2388	chrome.exe	84
PID 2388 wrote to memory of 1524	2388	chrome.exe	85
PID 2388 wrote to memory of 1524	2388	chrome.exe	85
PID 2388 wrote to memory of 4684	2388	chrome.exe	86
PID 2388 wrote to memory of 4684	2388	chrome.exe	86
PID 2388 wrote to memory of 3332	2388	chrome.exe	88
PID 2388 wrote to memory of 3332	2388	chrome.exe	88
PID 2388 wrote to memory of 5004	2388	chrome.exe	89
PID 2388 wrote to memory of 5004	2388	chrome.exe	89
PID 2388 wrote to memory of 3628	2388	chrome.exe	90
PID 2388 wrote to memory of 4232	2388	chrome.exe	92
PID 2388 wrote to memory of 4232	2388	chrome.exe	92
PID 2388 wrote to memory of 1400	2388	chrome.exe	93
PID 2388 wrote to memory of 1400	2388	chrome.exe	93
PID 2388 wrote to memory of 4936	2388	chrome.exe	94
PID 2388 wrote to memory of 4936	2388	chrome.exe	94
PID 2388 wrote to memory of 2440	2388	chrome.exe	95
PID 2388 wrote to memory of 2440	2388	chrome.exe	95
PID 2388 wrote to memory of 1696	2388	chrome.exe	96
PID 2388 wrote to memory of 1696	2388	chrome.exe	96
PID 2388 wrote to memory of 2432	2388	chrome.exe	97
PID 2388 wrote to memory of 5020	2388	chrome.exe	98
PID 2388 wrote to memory of 5048	2388	chrome.exe	99
PID 2388 wrote to memory of 2452	2388	chrome.exe	100
PID 2388 wrote to memory of 3276	2388	chrome.exe	101
PID 2388 wrote to memory of 3276	2388	chrome.exe	101

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7fff7160c728,0x7fff7160c734,0x7fff7160c740
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1616,i,11365132443439400851,16245620010567517412,262144 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:3248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1444,i,14206339133557234127,3143610474718053719,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2312,i,10022323941286338254,11598853186706228367,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2876 /prefetch:13
  2⤵
  PID:444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,11001406352284567594,13942288331023175385,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,18213884694471290084,7801622936886422987,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4340,i,12511831020343930779,4601971936300439398,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3852 /prefetch:9
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4476,i,17373897788283040229,9344615575643429171,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,13006089300532127590,5488582321609210543,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5524 /prefetch:14
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5604,i,16047053999701257894,15933112258293803941,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5656,i,7996242864748539464,4674559258939330193,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5892,i,16223491639432374415,13725458550356489805,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3412,i,10356105683859908739,1674230186610101049,2097152 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4872,i,10352014087022916384,11811364088663066025,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3876 /prefetch:12
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,1633197134068606148,729373280484140984,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5768 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,1583274603554329692,5068130954403646951,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4752 /prefetch:14
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,4932756043739438281,15374879228484985469,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4740 /prefetch:14
  2⤵
  PID:5048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5708,i,8670103364222368269,14408897245604083791,262144 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5760 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,14009141859733655480,14457620535226495273,524288 --field-trial-handle=1940,i,10032961940396798786,13015784825125254136,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:3276

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4332

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d3ef2ea042a01930223b42751b1fc0255001298d29dc44550a0c9fe6a443c6c5
MD5 4e7df5f38f35fe0f38c95a9c0f42a931
SHA1 9646b3c6df946c779dcc4b2472e4d379cecf78f7
SHA512 115e32351486bcd8a7996ca19e71a01b7d093c620cea26c71fe36cc891ba798d83ea396116f6306d1112ec3fd7074da3ad2bcd4fcbb8e5318051a81583e3c875
TLSH
T1E4E02BAACD11F8270CFD171874548647EB50135727415C5B3B3D460C8FB173B4245C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 75KB
SHA256 af6d5ffd5bdb3854485ad2365bbf67a15c66bf0214ef6332af6f0553f6ef2479
MD5 fd0a39a086bd8646f2dbc90787fc4528
SHA1 d23aa3ec6e38230689d71e837b972278dc81004a
SHA512 6f0687c370093da210b9a94130c8c5153be63da7327632090930c5851428775047e71faa12955524e8cf7eca46ef3239bbdc9e4279df7d166f06e0c6a3b0cfe9
SSDEEP 1536:5ZrjuurgFJgazZYM11tlz9p82zFU1JIh9u6gIZ6sM:TrjCZYM1Llhp82S+ciM
TLSH
T17E73028DCB1230C7112E777D0CCBB3B6555EDC89E816B165B6865A6AB363EC483B1C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 1024KB
SHA256 8cd6d5fd2776aed2fb86d4f90d42aa81b83a288870cbb29ba75687addf7c2f9f
MD5 599582793e1b48e40ffa8e9e4ba6f842
SHA1 7f112587b8134b2c32359d2882f1fc2bc58710cd
SHA512 d9b85b80f1d572149da3327082bd026cdc609454e786190b651117a73d033daba2ba9eaaf2934b9a9f37e78064d9fe094d095c108aa2c089813d9e9c204db504
SSDEEP 24576:S0YQCVf9YUtvXUAr54R2ChaHolqRheimAaGXQmF5toGneieS:SEO1YUdXUfHlqRhe/h5mTGhS
TLSH
T15E2533A6AAFE8151C4AC13BF52473FD5D78B5E50804F175E36ADBC6181C1F638EA060B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 1024KB
SHA256 a944ea7acc33858de47cac3b921eb60af773fbdce19377e8746d596f1972d1ae
MD5 5cfb924ae1c163259c8074d7b826372a
SHA1 092bb5255b75ef542facf171b440d9382abba0ce
SHA512 e08c85511672e4c4cb35480a8b7cc9b6caad4fbfc1a342f41298637f6b4c1cdbe6c0013a0082174f490f36d2ef1beed23a927268945b39c55cdb37a5b675568e
SSDEEP 24576:6Dygh5shyU5bWDZdukljnHRRgePRzIfwB:6uAsIU5bYXukBRxVB
TLSH
T105253396E36F9C3C8C2B986DC204410F71B03D68668B35133BB5E9FA799F409AC6DD58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 97baedf401a805422bd428cbbb1dbdfb7fc1636fdc725eea1e110ec973eff6ce
MD5 4d26b52a690ea94faacff86bd93d4ad8
SHA1 a4af087247fdbed73982e9544c1027191a55ed2a
SHA512 8dd8ff884603240f71e6cf3523d4b5e74fa1029c65ac4ddc4fdffba97bd5421492ba158ee75456bf40791014fd1724dc982cbb7c5dfd3bb9002bff8fbc8f0df6
TLSH
T119110E14D3BD2F22DBAF4B7042DB4B7C32F9C9ABD64F0903128859EA6B4E39244454D4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 8d41682b9ffe36e1e97f8d33bec3e5ec9b39160e588f7f1c615043cf9ec28282
MD5 da7482e47b4a81f4541448bf49cee9e4
SHA1 d44d8f734708728978f6788ac8f043eb4b157f39
SHA512 770d7996e10f565e7ac632692b05c78413e6f506633162d90988017a972d773c1be2f4d285494738d44a6aa253dbe7282253acf258b7d52df7a9759f2d9e5a8a
SSDEEP 192:DGfJ9z6zrhSMSTlaIaz0vMr4X5iGUAn1OAnnVLz0iLN6Xr0na:DGfJ9z6zrhSMSTlaIaz0vMr4X5iGUAne
TLSH
T15502AEF3C7E8866E891156F4A7107F2FCE190A2553183D1BC5E4AF4BA3E2971E140B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 b0e6dacd47f005a77a926dca2969218ca617cdb1a3b00eaabda022186c54d129
MD5 39c6390bb08e2c60f6fc06c3074d447d
SHA1 a0894a3ed224976f2668550ef25e86bf89e73195
SHA512 5f542366698da4ba4e961e450a27b9fe21178ba99c56e50508f1e0fdf58e37205ad175009496228e2c9853d27a0e254bf17f0c83c1a83fffb632fdfa74a27dfd
SSDEEP 192:DGfJ9z6zrhSMSTdWtaIaz0vMr4X5iGUAn1OAnnVLz0iLN6KnimVNQ:DGfJ9z6zrhSMSTdWtaIaz0vMr4X5iGU3
TLSH
T1F612ADF3C3E8866E891156F4AB146F2FCE190A2443183D1BC5D4AF4BA3E2971E150B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 6f3d952bc88643ca412e1f73ce6e5f72fa4a119e0be224a6ede0b35003d94254
MD5 d684db7035ec4cadecbca3df9762706f
SHA1 3e2c4ee7c5e58dae1218e400a9b2df9912d07f94
SHA512 f17d30174dda02935e169899bb4db705b195180031f0d1af9f3602e280309685a5d493bcb6432e7cd22993f2c0225f0f592efa7fcec14b3ded9a5ae666fd9a65
SSDEEP 192:DiJtx0uLhIGuwWV+aIazuvtq4XEdNUAn1MAnnVLzicLNiam4TjhAQ:DiJtx0uLhIGuwWV+aIazuvtq4XEdNUA1
TLSH
T1CFF1D0F787E4856EC90196F4EB146F1FCE290625032C3D26C5D4AF17A3E2971E190B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 10018ae04c60c7f2c3a4f50a5f80165731c9719840139f5144e561430b54454e
MD5 9a15d407644fa8811923fa3d79cc8fe0
SHA1 2deab4b063f78140d8137763a0b595c0b626eb90
SHA512 77bd6cac4570d89675037eae0623e0a42f410467f77d2d2ed64f147e9ce8e139247fb4e2016e7ec5334b1a5f7eea937a52c162f1062d4e2955e4b373e5f255e3
TLSH
T1332168AB92BEB82B553C1C7B7D00BC096C7BB431019214F0DFA6912C70D25F74B024A7
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9435679c886f2ceebc20850dfccde380a974caf480954b2d43f12aafe057c694
MD5 33b7fb5403d52fb3802f9fbf1e03dce5
SHA1 118199380e23bacee75024c8484b7927ec298054
SHA512 9491a4bf59fae183541ca167c7f644424ec568ca46169f2541b2307c86f79ceee12f77539ba92ec3569d4ace23713bd38f22d0c4d2940cc6b1a4f1e99e197d18
SSDEEP 192:wRIRULP5LVKbjv7spAPRp2dZWh7H69AHWLb+WNreF6DEr+To2b7T2HeE/a/O8yI4:wRIRmP8bgUXGn2ctIx2XT2naBE
TLSH
T15052C66BB918297B5CE7D22AFD25BB57E3F51021A1D01E84E6FC8A1C15E7ACD321B007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 61931dd6bc45368796e5f895641464087ad1f655da6b9ee2aeccbafad581d0cb
MD5 9f5fa9f087a9ab09306577ad29383d9c
SHA1 ee1f971a7736825155983e527164695122c66cf8
SHA512 cafcf0cf0ad27de758814c3e3e1a2514613da26e313b2747310d4cf3fa61b77a737cd5128160a3fe9008b1067f985ffba057ee457eb92ffcf0972c465af6d80c
SSDEEP 192:wRIRn3qVKbsv7spAPRp2n7HO9AHWLb+WNreF6DEr+To2U7T2HeE/a/IVyIsnAUge:wRIR3V4gUXP2ctIx2AT2na0e
TLSH
T1EA52E72BB924297B5CE7D22AFD21BB57E3F5102161D02E84E6FC8A1C15D7ACD312B007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9559725132d9322137e18c8c72c35545054803a523b6b01bcdfd4616a9264778
MD5 9b0c6f90e661ab02267c8e9af0095aaf
SHA1 654937b2ec4f9d89e694160c168c47b8156b9c21
SHA512 209dde73b419e3dd9a54ef68d983b5b70a52e37f5723b06780901ae6fd5af657fea93922263069eff20a16dcb964b956b73032a81ede7499b364a9734dedfe6b
SSDEEP 192:wRIRgLP5LVKb4v7sptPRp1dZWh7H69AHWLb+WNreF6DMVQTo2g7T2HeE/a/a8yIE:wRIR6P8kgTXtn2ctIr2kT2nalnQ
TLSH
T1D762D76BB918297B9CD7D219FD25BB57E3F52021A1D01E84E6FC8A1C15E7ACD321B007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a17e67cca4775d339c28902ef25b4e410bdef0b1501ddd8069b86b34406155c0
MD5 b2dba8540a6eb14d475e9c2712b912fc
SHA1 f2fbf425f7692140b276aa3a2af53d04ef226770
SHA512 fbde5c8c9870197f9bbf4f32af7919a5b226000b3d94a825b09fbd0ddfac78fe7cb21b8f9c24a1cbb5dfe9ac115f8ebec92462bc6d3c0e6dc459302820ee159a
SSDEEP 192:wRIRULP5LVKbvv7sptPRp1dZWh7H69AHWLb+WNreF6DaA8To2u7T2HeE/a/a8yI4:wRIRmP8ngTXtn2ctlf2mT2nalE
TLSH
T1EB62E66BB918297B9CE7D625FD21BB57E3F52021A1D01E84E6FC8A1C15E7ACD321B007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a8c85740abbacf70cc5cf16894b6cf713278a6757260cbc2f127729225589fb8
MD5 b27d877f12c68ebbc19b4540db019cb4
SHA1 098e36516ea412477156fc1fa1ed136fe6cb6225
SHA512 e290715e2da077e5124b94939aab777d191220ad73e61cac5615670f4fc11ac11f4573950227af97a861f4896212303fb72f58d14743a08f83c5375d5a1ebd09
SSDEEP 192:wRIRn3qVM7v7spAPRp2n7n9AHWLb+WNreF64To2n7T2HeE/a/IVyIsnAUge:wRIR3DDgUXu2ctT27T2na0e
TLSH
T13D52F72AB924297B5CE7D22AFD25B757E3F5102160902EC4E6FC8A1C15D7ACD312B017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 5ab444414a02d4891c7cbb4db3735bec720facb3265bdedc915a68f6beef1cd9
MD5 191a425abbe14997e55d6c34d96395de
SHA1 567b4a799716eb9b3db36abe7163a0aaec1148fd
SHA512 d0c7f690ea61add197a2dbd706250b5de93bf454a11e6e82e25faa2759a36b7158f1e02247d411bcd65234e3d4eb5605c539a97b277b15db18786f9fbc17ab4a
SSDEEP 384:UujAr7KxkXqKf/pUZNCgVLH2Hfgsl+m7pLuLcifmnXODAH+ErU3xWHGWmvhxVtfC:UeAr7KxkXqKf/pUZNCgVLH2Hfgsgm7p/
TLSH
T15D720A677C4C9E770F94CACCD8167A4FADF6024B65E9889583FA982903C5ACF11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ebd1d48456ac10b76eafa6e03ae8fde5deecd34e\a7f4f11a-f080-4014-8879-03b7e7da12d4\index-dir\the-real-index
Size 240B
SHA256 2a49388b5522a9a40292476be6ff6ae201762058e68b0958607c6d056bd0a3f7
MD5 95fe1519767786e40e44d74a6dcea33a
SHA1 be9acd949677355b9518b69bbe139ac879f4cf33
SHA512 a4b48e619905979fb0bcde5802749a321f2d5008d068ee3396f919831690d292929a2086a7697bb54a0ffa53f5057dbdb5dc8161fa230b423a9a3ad8d48ed5e7
TLSH
T1CDD08043C445C961CC6927F15055B0C477B15437C1377653CCD8B1D49A3634DCB0194D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5939e2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ebd1d48456ac10b76eafa6e03ae8fde5deecd34e\a7f4f11a-f080-4014-8879-03b7e7da12d4\index-dir\the-real-index~RFe5939e2.TMP
Size 48B
SHA256 9d59acab6c7a958d2b7051c61871b8d44665b3bf894067d17c25c0d9dd113ebd
MD5 99189b9067bddfd733665a3bfd2b3a02
SHA1 e2f1e3b62df14a46d180ea9f9c6240cd5e195d37
SHA512 3048e02ad2a7bf00ee3e0c8061706add3ee40f338a8b314d658d8fedb1dc80ac786016d412c71ad454de273eb8e5cb978bac1368475b6d95d0ab0ff87e65adde
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ebd1d48456ac10b76eafa6e03ae8fde5deecd34e\index.txt
Size 147B
SHA256 ab7f75d28269e444ae82820291b08344654f2d8ba313a7459748ecd9be65b8ac
MD5 24e5f24803431dd85365bbdee3ff9762
SHA1 b78e4ed6faefac48ec545bbb78675429250ac3da
SHA512 f973f0ab953cf033a437049a56ca99d8acdc21d090b13332ab9f11a8ecb02de67dd5b24ed0d0e6f7a253d1551942fe8bacde521b3ce2f547c829ed3116381e04
TLSH
T149C08CE78948A08AB2B38EC209203A5142561A4C4DF9CA0C4020044C20164619129708
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe593a11.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\ebd1d48456ac10b76eafa6e03ae8fde5deecd34e\index.txt~RFe593a11.TMP
Size 152B
SHA256 b305bf52c1be8bc76950042501b6cf363a6e05e3b3f3d63e10a2d3cf948e6838
MD5 b2b88584953f23506df176c53dd006e8
SHA1 c28a17dcd48f5dac3113c859d8bfcbf52ecb71d4
SHA512 c644011c20fb117646d8e90a9d1a412c263536e09884de38b4f55660275ea81daa8a8324482b0b6c13ea8e5690fd3e3f9502e89b70e2ed512cc74ba0260712b5
TLSH
T1C6C08CE74A58A08ABAB34DC208203A8146661E4C4DE5CA0C8020344C3032422C629704
MD5 SHA1 SHA512 TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 23KB
SHA256 ed09f336a8a51a8e18a2447bc0565eff8987e775b5b58cd7d7add085a53cc951
MD5 9e8abbd98b022696fe11a6c122b53eda
SHA1 deb05f786ff1e1afcbded266d451ac22fb7ae36b
SHA512 e53e63475d7ea822bb1ceb58bd015271c47a39f9b420fd5dd4e6a2f49d4ce8600825645b85855d983f803b8b2298691ca9fb4ec9e37f20cd4712c7cb69719834
SSDEEP 384:BslsmVAKibrLFVGZi9FIFbAjRWGRXxjrCd1UX2VjkWKy7fe6jc+MmgCzvq5ww+Ni:BslbK5VGZi9FIhCRWGRXxPCd1UX2Vh74
TLSH
T1A1B22CF9777DE13347DE91A6D4352202A266E3886C4980BCF37C6EDE09584425AF9F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
Size 60KB
SHA256 208897150da26c76ed6a47f8b358a2376e60a6beb39fd55d27a8fc745842c08e
MD5 f44dc718880423aa48c74cb4182979fd
SHA1 0d2c05275cb26673f3bdcff385ad6c9126804bdf
SHA512 b181b1ff4ee4011498a88f4099998c0e9095fef4c02b445aa22c756d1cef604acf981b8295c0976f5294b9c0341012038561cfb4ac839c525be6ac89b8bd58ff
SSDEEP 1536:VNASsy0pomrfGhcPZDRp1xT06wXJlAa/MrSsK:VsyzmGOZDRpbfwoa/1sK
TLSH
T15753E8024325AA1BCD3683FB46934AAB333981087F83E21F5697D3B55C257F7998E817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 656fb5db80e3088ac3d8b015c01507c67f0677efe285ab866c5bb1efb276554a
MD5 b18928981d13aa38dd386f0049b16738
SHA1 cc43f3d661e387015428bc6f5e090ab7ce524f31
SHA512 1b0493001bc4125114ca097b3af1890d9ae7259037e1e492e0b7480a96a48a13f49142a9a1b64cddad27040bd0793b5ae517e9817641f43d4f8c15067d159a8f
TLSH
T136C01261C602B046C84B03B41AC384BC3614EF22D605138D92F82AB1FD391318319363
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2a91e96d67c609536c59e7f5ab3017eb39f8bf9307245a99b4811183c1d6f013
MD5 1ae78e0ca78d6f406fadcf0bb49cf91c
SHA1 37be7034495f5b9c38accca76999fc52bc04c1b4
SHA512 045ff2b3e294815dcd2cf25f0c9245692f15a26507a9b84b8e299f0914131fe18513f811be2b8dc7ce814cd7dcb4d8ea8ebb1cbec6d66d17303489cfca5c1ad5
TLSH
T1A9B0125180069901C4D303B0128704983514DF10C7091302A3F46AB2D82B1A18218150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586647.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586647.TMP
Size 96B
SHA256 8cfcfaa0c7a132cffb299e77fa9a10387e6693737f4aba0aff3a813d39b5b832
MD5 839ef1a1cd98ebe6e27c541f306ae9b8
SHA1 68cf427a089500ca1c07d5e5d7304cd7ff599c6f
SHA512 5e5d1c4889d6aa9d52326834bc0171b9fb6462e46bcb1907aff1c05ddc039753e3d66da813bfd209044912e38c90a49c1588ed08f0d015f9e8a43e3cf7d9e507
TLSH
T17BB00255D1077213C18237B03595D6FC7270DF25C7031357A3E42AA6DCA66B14966AB0
MD5 SHA1 SHA512 TLSH

Submit Download

16c09d76ee0e1832_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\16c09d76ee0e1832_0
Size 194KB
SHA256 e88074fa3982cc2adc7b432f1d8338f9829e155478b881a5177183a24eeb79e6
MD5 29841655efc798af59a96928eb3b0117
SHA1 0505c275f74bd903c7ada06238f76b5bfda68a54
SHA512 2a13ecc6c745f570aed96cb35e75aafcdccdf98aeced42a44bf1f60a2c7877f7d32d736ff7e673d210c67d3c98f76142aaa9eb5460033d9ba754b7b2018d132e
SSDEEP 3072:9egF1cJu9zByRIZa8vj0QbJI1lXrZ1lThh:9egF1cc9zByRIZa8HlI93h
TLSH
T130146B316300F43BA9139E61A27F7F4E3C35A16BDD0686FCA1E4E870AEE6CB60515758
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 3f367d85d026d508cda7e64bf9a764211459918002f00cb1f8b662401df2c1e8
MD5 b7b77abd00e36ce3ed813a532e197e68
SHA1 b4fdae17e4e820b8d4bdd10fd376ea0dab270466
SHA512 2c8747bad1147e0b4a35f5485a905c46b6a2bbfcf924b4f2478e7cc28c235c83080cd63f8b0134744a0ed76f7cafa8025fe7b22249588b0eb2f5caceb95fd6e1
TLSH
T168A0026115C42925CD212276108E4B592352B818635DCF07E9EF40948D6355C610D117
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 437cba05eff2f420692359559239e8f6f6b066354e353e9dced498d5ed45e1db
MD5 a97636fcd7bdcf03b74342c2c016ae38
SHA1 f0f7786bcf2a755addd36f3a1bdecf7c4ecb5208
SHA512 9c779c95ddf809c9e792579ad536e4e36e534366f6c9959493e7e1dd649b13cb7fba7d5567acb24191a911cea8ee705e1ac010fca37154e1947c689597074761
SSDEEP 1536:yLfP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:Gn++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1699302BA991E7C3963AFD7A6A0079CAC4CE3DCCE1514557C30C75F0E14BA392A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 fd8d288001ddf0454151b54189fb4a28a1f28cfec1133c1cde6268b7d85bbcc3
MD5 01355a32feab5858a972772f80b72ef3
SHA1 600dce743c09450b5d3f874003fe1c49421088ad
SHA512 37d7776fba833ec41ebe6650a4d2757847dd0ffaf5afb3a1a429ab832e08e1097eee543c9d97ac74a0316adc628993c0d40c0ae66ca746ebb5d38769b24f37a5
SSDEEP 1536:pLfP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:xn++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1A89302BA991E7C3963ABD7A6A0079CAC4CE39CCE1514557C30C75F0E14BA392A34B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 29f25b65ed32ba0bf3de4c153050e93de081cb8a181c9a367d9831215f6806ca
MD5 8ffb52d72174329bd985b8e18bf0e3e9
SHA1 692cbdb80963de94bd743de4af86d3cf319cfae9
SHA512 e2840d0657739219c419929c8f2d16c6ff98d42843ff99edca6338bcc20aed2132e6953a518bfbede659b204665f6401ef5d01e3da0c93ae9e8ef515c6b8cbce
SSDEEP 1536:KLOpP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:+OR++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T10C9302B9991E7C3963BBD6E6A0079CAC4CD39CCE1514257C30C76F0E14BA3D6A35B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 f687263942f9ce41bfd56f150a10be6f95d2c1fc759812ae14bee631a593d53c
MD5 8ddd7b63c91b5c669773b5a1b57ec2f0
SHA1 08da2050fc30cf79956f01cc4ac17092ddd3786a
SHA512 6a4f8fe50940c6ee2cf69a123fa4ba1a1dd6b60dd3d43d90910b3d017a69625030f8bada78cb551c96a2b2b74a63016c4421a3a0bcddb3a6ee6ea719a9be7627
SSDEEP 1536:yLOpP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:GOR++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1919302B9991E7C3953ABE6E6A0079CAC4CD39CCE1514257C30C75F0E14BA3D2A35B8A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 a13ec237c6dcef9a2a6c5f2851953ab0625ea9cafa6541067e19572570fd851b
MD5 cbae7d19baa89226f067d1eb1696f6e8
SHA1 76eb705d771483718e87bf6d01f0acba8c1bd5aa
SHA512 e01edf695fef043c98f7f66da337434bb6766d943276dbb3cabf7f2dafe791bd04cdc397805c233cbaf020b616d808418639dd8d5a8f667e741685724d41be12
SSDEEP 1536:4LpP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNxZ:gR++J3qUQm08KMWF0bFTcVHr6zgZ
TLSH
T1699312B9991E7D39636ED396A0079CAC8CD3DCCE151015BC30C76F0E14BA3A3A31B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download