cd68d37c16715f22d45761bcc6eb6b16bcc8e00a5c2785804640bd1807d88f80

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 20:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AOB-BYTE CHANGER.exe
Size 619KB
Sample260511-yrwrlsds3m
SHA256 cd68d37c16715f22d45761bcc6eb6b16bcc8e00a5c2785804640bd1807d88f80
MD5 0d5a376953d55a90d55319f7fff92d75
SHA1 a0b855aea337b15df10aee39c8ca99335ff0a9c0
SHA512 1fc7515aba3ce91109d9a389415b7adda8bb804fd4ba7a7442f516bb8a5679577e60841df8d9cd038f8a04ac820489e18551809f8de030169e540b49b6f58390
SSDEEP 12288:ZJoFTucdsas5vsRHT2gp5P+PpJdxRrmRIQF:Q3dsB5vsNT2gp5P+PpJdxRrkzF
TLSH
T1EFD4312835A959A2E275C07DE946C69ACC60305D133C94F7D286CDD8BBA03EC7B7CB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5028	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134230033242623731"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\AOB-BYTE-main.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3676	chrome.exe
3676	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe
Token: SeShutdownPrivilege	3208	chrome.exe
Token: SeCreatePagefilePrivilege	3208	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe
3208	chrome.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 3208 wrote to memory of 6004	3208	chrome.exe	82
PID 3208 wrote to memory of 2560	3208	chrome.exe	83
PID 3208 wrote to memory of 2560	3208	chrome.exe	83
PID 3208 wrote to memory of 5028	3208	chrome.exe	84
PID 3208 wrote to memory of 4328	3208	chrome.exe	85
PID 3208 wrote to memory of 4328	3208	chrome.exe	85
PID 3208 wrote to memory of 5244	3208	chrome.exe	86
PID 3208 wrote to memory of 5244	3208	chrome.exe	86
PID 3208 wrote to memory of 4540	3208	chrome.exe	87
PID 3208 wrote to memory of 4540	3208	chrome.exe	87
PID 3208 wrote to memory of 4324	3208	chrome.exe	90
PID 3208 wrote to memory of 4324	3208	chrome.exe	90
PID 3208 wrote to memory of 5084	3208	chrome.exe	91
PID 3208 wrote to memory of 5084	3208	chrome.exe	91
PID 3208 wrote to memory of 3932	3208	chrome.exe	92
PID 3208 wrote to memory of 4564	3208	chrome.exe	94
PID 3208 wrote to memory of 4564	3208	chrome.exe	94
PID 3208 wrote to memory of 2748	3208	chrome.exe	95
PID 3208 wrote to memory of 2748	3208	chrome.exe	95
PID 3208 wrote to memory of 3872	3208	chrome.exe	96
PID 3208 wrote to memory of 3872	3208	chrome.exe	96
PID 3208 wrote to memory of 2952	3208	chrome.exe	97
PID 3208 wrote to memory of 2932	3208	chrome.exe	98
PID 3208 wrote to memory of 4156	3208	chrome.exe	99
PID 3208 wrote to memory of 5552	3208	chrome.exe	100
PID 3208 wrote to memory of 5552	3208	chrome.exe	100
PID 3208 wrote to memory of 6084	3208	chrome.exe	101
PID 3208 wrote to memory of 6084	3208	chrome.exe	101
PID 3208 wrote to memory of 2944	3208	chrome.exe	102
PID 3208 wrote to memory of 2944	3208	chrome.exe	102
PID 3208 wrote to memory of 4732	3208	chrome.exe	103
PID 3208 wrote to memory of 4732	3208	chrome.exe	103
PID 3208 wrote to memory of 3676	3208	chrome.exe	104
PID 3208 wrote to memory of 3080	3208	chrome.exe	105

C:\Users\Admin\AppData\Local\Temp\AOB-BYTE CHANGER.exe
"C:\Users\Admin\AppData\Local\Temp\AOB-BYTE CHANGER.exe"
1⤵
PID:3356

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff82402c728,0x7ff82402c734,0x7ff82402c740
  2⤵
  PID:6004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,220995283383343937,6073346148668218652,262144 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1932 /prefetch:2
  2⤵
  PID:2560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,5756013261406663398,327324789690224199,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2248 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,13868813962651351230,1395962267173008173,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2552 /prefetch:13
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,11828450505600475061,11759049327767226242,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,694995516739016636,13244433587428532588,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4216,i,8400726052757176449,3071342589951246081,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4236 /prefetch:9
  2⤵
  PID:4324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4640,i,14282799495245894870,1005047834844685759,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,12463134473256040283,4307248969366236522,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5704,i,3654517739865124075,6338841087222615463,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3684,i,5789473666498114487,4869431059120504179,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5952,i,8521446249101980392,8515326852592119306,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,11336280833870242126,3053186962215194990,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,6674021227189408044,10419090424371815471,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,13377141176445514842,7864029974232415692,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:4156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4276,i,2875663843010247484,4101716375238031520,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5816,i,16662909222070247371,2102539497897679399,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3836 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6108,i,4119518930513193079,6629554305941060834,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5776,i,14993413340695188776,9059008894690170491,2097152 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5680,i,10849704536572955264,11441730859256942949,262144 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5692 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5924,i,7854793885402347058,9283903868329423634,524288 --field-trial-handle=1944,i,13262444527109185519,18290677799678754236,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5664 /prefetch:14
  2⤵
  - NTFS ADS
  PID:3080

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2768

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5292

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a8c8d1416c98ffc51a1db964764d5104d88407708fc641190bae41b5af4ec595
MD5 783fe861b6396691a1ece629fa1489a9
SHA1 364da80964ef6b80e7b762260bb5805045ceadc7
SHA512 58c82af7535e4672284e184f67ea59244dbd19705da970270ee1555d84f85d02df35b347ba66f61665db43278b0dfcb17675cf281a64ec567e71a1bf88aae795
TLSH
T104E02BA6CF65D83708FD0B7861400705E74517662B41894F7B3D460E4FB563E864586C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
Size 42KB
SHA256 7fc2ab36d3f383a2198ca0b481019708ce6d53dbd65b649a40ad42bab1d3f637
MD5 0f4114ade728f4eb745711acfacbd176
SHA1 5a4413df02d558efb8d7e560cbc4e03d7639f57c
SHA512 009a6e5676118e45b703798d82f87885ae28b296dc133cdef152aa3c4e72a8d97e1de5958efb1843605193ec13dc5d21ed4cfc5928b00fa29ed95e87d0924785
SSDEEP 768:3T9Cz4Sfa/5e0BCiCgv0sDGP+X3qChE1nuCScHWjWATm6DsAGJ8G0+Oz:3BM4JrCQcsDGiqCh0uClW86DsPtfo
TLSH
T1DA13F1A5E57FE85336074C0A5C57A860B779C3C9DE286C4CF230C4F29B486E89293765
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
Size 39KB
SHA256 d17d94cf63150e9fb35d68fca75c5d39459ad55139a5c3147218dbd7e2790c3f
MD5 9f78178075b5782a8cf6d8aefc10cb59
SHA1 9f41b1a81bffcea395602473b69bab2893787712
SHA512 07fcdc508df827dcadb4964861b7acbd68820abe524e819ba2c7b1e694dde71a3e3c1009dbc5478eed99c008385407e377b5334bf4f4fb18b088f5d603fa7190
SSDEEP 768:bfRUm0xD0NqiaY3+CH6+ua20Vv7SaNoi8biCKo0DcYtEC4Zeg1f5I+dlx:LRT0xD0V3Q0Jz8biCzYSC4Z/7dlx
TLSH
T16803F1121910AE3DEE51F08647B797D836C6EC9BCE388B615F06C98377351C2A7451AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014
Size 23KB
SHA256 0cea12aaf924667148156df71d790612ee7a4a8f4dd9d3af05a2c1ca4ca39cef
MD5 b8f33eb3fac3c47e81c58e9cf5fa8ed4
SHA1 2fb328ba9f11686d07ae4599aba38389573bb1d6
SHA512 444d9f7b231b2ee8ee9f4be4b3698f59decd292c3e849039b11527e7662b95b87a23b686122362a82715966da45a9244ced9ffb1c3cb14fcd561995c8ffd481d
SSDEEP 384:Q4z0a099ccmMcOAPHNUU9818ogSayFfyPO9zNbpQrJuvkJNl1fZk31qwvNGJUA13:J0n+XiGosyByP4HQr0vQlxZkAwvNGWy3
TLSH
T1BFB2E172EB9970E7A5B5A38F91C3483E8680D3CB5DFA8132141330F2538C8BE65E9557
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
Size 31KB
SHA256 de61fa1b384de12a603820c40c7576641a8208e9cda010299e86e56b8f6bfb6c
MD5 004d90958f543576edc9ef780168186b
SHA1 a82d4489f81d64aa772973174b0ff64120bbc494
SHA512 7b2b05019025f063c750fa6514b82f9e01682e561b6e9b99eb5d3cdadaefc4f75b784b9fe00591e470ed5bbba2b1453ff069b9652c6e1f79c7ef1ed81149caea
SSDEEP 768:DZKtq0vYtkvBrcqXYFf4NXTTz7emzj2QVHBwlPr+/S3V/zwG:Yk0vtBzo54pRJVHBw/FbwG
TLSH
T1C2E2F1C5712C691D21BE6885C263E793312F148642CF8A4A37707A3DD0FC6A4B9DBF4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 21KB
SHA256 606fbea0d74db072e838b1e3e483460e0d489ef1bc089ed0eb2ffafa9bc60e76
MD5 a7446d60930a14036a33d7a48d635233
SHA1 b8c097a61199caaf38e927946d300cedc1dd488a
SHA512 77499c572e501a830dd1ac65167e2ec90a29e0b7c2eae58a09578d8fad3a5906eefccc3bcf09a245d960fe606ee63ae84a28c081fe7655a6ece266e7ac991223
SSDEEP 384:MpjvNkhjUv/R+Or6KScMDiIuKH7ZnU4NlYj8GhfkSwAhMlfVbt7WPY2:CD3Rl6KScMFuMZU4NMhJWLfjUr
TLSH
T166A2E119E27949B0F43679EBD435B4285C627F94250437E2374BE9E24BC801BBD078B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
Size 18KB
SHA256 3c172d1ad34997b841a161e764380766b5dbe3b70733b7a5853745bf1848a0dd
MD5 0524cd2a2adfdfba20c75782c1581019
SHA1 ccdb8bd8bd82d3d6582172543ada5f45d92ae4b8
SHA512 d60c99a165fa605da0c2f8a868b604e3f456e1dd187b27dbe4738d8b7e0693b4f37be7f2cc36f5ca28f8266debb2c615d83617b92b978a7a57ecaceca686a0c2
SSDEEP 384:t33RXA4PopKVxMHqiQ5RvT16YZPSsY5XWltnYPVxXFWHRr:tnRXJ3xMHqiw5zPt3ltYHXFWHRr
TLSH
T14882E191CB8BBA2ABF214AC7E27355EBB6DC14079A0D7145CE3BA70C32480F6E02F441
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019
Size 30KB
SHA256 56dfbc8a547194ed2b51018948520f309a3f07dcffbc71765e65a10888786b0c
MD5 156c7f35fc7efca07a714536fd3f4970
SHA1 a4dd5ae642acb8a3ed3584ee3b49891ed8085260
SHA512 b2caa58146a42f4eb914e169d7638202f6310a5d49b01fc8df193ba1f0569e6d585e68f782ff058e4c2379c91225356ffab8d0cc6d93a9fa840d60d35aa828b8
SSDEEP 768:IbXvY6a1pNtAajEpPmTE+vjRAUL6k1h8nmRM40OX6PzQ0F+UsZ4L:ItaXrcIlL6k1h8ng0PzQy/y4L
TLSH
T1ABD2E18E53D04ECB921FD0475A1B908EBA57C6F5AED6BC7A5A9372434C90C0BF14D90E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 16KB
SHA256 9311b79932233df4afbf652ba8be19a3518408203599139f0426c25a89f75645
MD5 ae8c9272bbb8adb3c39d8cb94e968ea2
SHA1 228d698e158cdfbd1d4ed409975699ce0aaca04a
SHA512 aeff386ac1fd05b4e4ce3cc308b25ddf36d6fd4bdc4238bc4c41a33b6086521c5302279ec2ae161748a44434b2e49ec4027c55d8012125d83816c8533b6f8dea
SSDEEP 384:yiFKWA1QUrYqLKIwQXQs0geXhWOvGEEpAPG1YZlHrZ+Pv3YP0ulCaU1/O:hFYQUrFjwhNsOvGEEpAPG1YZf+Pv3s0C
TLSH
T1C372D06101A48934862824D2E33BE48313F4FB974EBE8EF184F277C51B275828A44FF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
Size 65KB
SHA256 f898c23acd91d6dafad0b02215645908d86465d133f450ac3330f6f03e34b9d8
MD5 dc81f2522b0f6f71e058b228e8a6fa35
SHA1 ae23d1d859ae6a3520cff4c266e80b15d324fcfb
SHA512 5b4f3f1bd7462ca176b94534b604c841714cb3bab623864296fe2d4ff17d04fb700653992b0b076700c5a8ae4fa16fbf211e4314feb564157b7538c34713242f
SSDEEP 1536:3uGV5locriZoalCbxPD7oOy2CmmVM8koclbOrTmG:3/lo6idyxrnhveM8koclbOriG
TLSH
T10C63021C055F9B434DAD35BE469F69A03C23548DC289D33DC33D178BE6E09B4B698D8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 87KB
SHA256 4dfa34eb3f017bb7e405d5be96f8609bac69f0d49fa776f14108530c4f20cf58
MD5 a0cbd315a00c2a316fcaa3f826185a6c
SHA1 6645142fa13a09666f6a62a2302c0ac5e72dacb0
SHA512 7b74962ab8e8b92682d1c994b6c96d3eccf3e377f1ecc6cc2e932e82391a951fc37af7bba4aa3b3b61a8c05c8427b17bd79e46a8bd4480e948b16126095239be
SSDEEP 1536:XeS63JnVM7q1ac/wH14VlvW0M7OyrhUT2BIpE+tXrYUy8m3K2vy//MKugvKGMUpq:FoMXc/6qW07ym3cUy8m3VyP1vxNpq
TLSH
T1169302DDAE1F64F90886B46E43CB41E2359DB85630248EF4E4A22116BB679F0FDD634C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
Size 53KB
SHA256 1d35084470e421f95bb7afaa66b55b21bc2dbb15fc9a5ac07129dd5a08491af6
MD5 a94d6bb8e9a484ed7a874ee8eee8591d
SHA1 94ed5d080d3d83599938560c9fb4aa45643ee815
SHA512 8da83de7654df778dbf4423feacb5840327fc66b37f0f3abd33672e7c48950f44ffa676792b49fdecf9fbc6e252695aa4e899bafe9d6689f45e61232ae28e9b0
SSDEEP 1536:y/eQEKWpT3xNJeVeVU+Wt+wI4qHl7j9t/K:ymQypT/JWltnI19FK
TLSH
T1EB43F25AA285C80BA8BF458DBA2A35958333C4DCCD53F1AEF494D963384359D4DC63AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
Size 18KB
SHA256 f643b2fea3f63f9294fc2f7e667a0a614fd1ecf0d3fac20ab0552bdb9046ef91
MD5 efb494251bf84a9b17ae89a59fbad911
SHA1 4be22d9d5ac424b95e0fcf5140fe11335ac89e26
SHA512 a8dac14319d9e7866c4e02e8af2435a447d9e9725c705f204df4517d9816a3aa75bbcfa91afd905b340a03d2d7cac611d6fa37f56ce1070abd300f98296dbe7b
SSDEEP 384:0HsvISycaUcbq8dWiuBDv5uqzZkHcCeT/EW/CNTD5EJtsKoSX5Hf:0HswSkUJ8dWbDvrlggTEWsDPEf
TLSH
T1F282D145EC8DA61F09C170210AA82DDEE1F6409B63114F79DCAAB27D3C8F8BEB19D845
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 122KB
SHA256 038a579b8526a2c8240afa2d46e17592d395a45d62a8be9511e8cf7bf90166b9
MD5 e4f01b594ef0447459cafcab3d34de20
SHA1 248827406253f1f6620d734fac82b7d1c97906da
SHA512 76a61b91db4507fc1a290f0cc2f2184198a8791bf7cb81089761990bba8dfedec7d996334ec83fe9c7624bcb3e43d6ff37471e4667cc5ab5cde7d2d0f89a2d30
SSDEEP 3072:PcDWwZqrCRe4sohP5kVwqi06gY5pCuwyxrcdiWZfy:EasP5kWqi0Y5pCuDrqiW1y
TLSH
T16EC3124227886D6FDFF8360FAE5D07E93A741456055FB9CA9068CE039767810CF93A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
Size 100KB
SHA256 30c7b0986a1e1c609d6b23b0e36169bfb5a77f80c4220780680363bf9b2317de
MD5 00f998695ee6f7bc77d89d134b8582bd
SHA1 49d32b3cc9fce07dff4cd0543d36cbf7ea3e57a3
SHA512 d377968b28b5bfcb18ca2a025bdc753cc315d8b79b857bd51585a91b2d6b3eccdd494e3bd0ae6b4bd28b492a878ef2edf510f6e20c5dc3d5da59b14d1a63ceac
SSDEEP 1536:OVhPHl1X672Oa/Uv8U3P6crSaljc20QweTwLmYgaIUYGBBA+uVblCK34UmtBePm2:chfl1X6KvknSxa133weTQOU/BUqwPxvz
TLSH
T1DEA302A6104202A5FFB261F47B793B930EBDECCA2B70C87902EDF71A5141E19174A57B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000023

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
Size 25KB
SHA256 041587cf27fcbec001a94d0af07534950903d4f664f9f3d1ed3169c7d88ef3ba
MD5 872f3535301333b09eb384ddd78fb36d
SHA1 586ff32db246ef11273204844df5f03f01ea87eb
SHA512 74aa7fa9b84a5ee0bccbc06e22cce6f1715985f420df3096e123b20f235680cd294d37177aecdfe30c725822a286e9964e6e695d8ca44afd362e40b1f370e3cc
SSDEEP 768:a6JBofmMxOULbTu+V3uHxIw84gbFjRY8DI6FYBa:a6Pofm0TfuR1NQLY8dFOa
TLSH
T18BC2E1B67E242379316EFBD293BF1C4709760A091B59AC13F06A50B55F813E836B90AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 18KB
SHA256 331c641db8455c721a274539a97906868a46a00d071a4c4c206c6c7190f2eb3e
MD5 aa450cbc92d0574dd3ccaca8286831b6
SHA1 06c5f044679e1c1bdaf203683f47b4351762d97e
SHA512 e784a429501d749ba9202fbbfd70bcbb953e1ca6326c3e79d4cf575d00c0ebc545da154785ba697a3b730a937ab7b3c74bddbfa24a0f709465e50627cc3ac9a2
SSDEEP 384:TOqDUT3y5y2wBe82igBwWLFNbj/EAe3ZVZr32y9PAYc6wrOCrmck10q8vv:SqDY31lxaBw2FNfsAe3ZVJ5dPwrOYk12
TLSH
T13882F2670D0BE508CA6D4999223EB4F472CD031F84DBC7931B333D27B5EB11D29A6609
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
Size 17KB
SHA256 868a61084ad8c87081b0df092373735a90037275ca881dde04e1fcb1651b01bb
MD5 e6561d716284f06b5a24e8f22174045a
SHA1 398e785b87d7f2f8ee4a97e22140d9fb617deb56
SHA512 5adcc8f6bb1df41e1bc458da5843537dac22421ddc30ccf84f2c39342cc624eefd207656200866d4709c233c07340ecd8c7c500ef8437e656f739d321bb2d725
SSDEEP 384:HwYrBxp5RfP0kzKSBX1fWcwBK/hxL7SAUcGOcDmbMA3/:HPrt5R3DKSBXADaxf5NL0AP
TLSH
T11072D08763B676994EFDC9D1502C801E200866FCB78967A9C4BD5FDD8E1A3A2100EC8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 0a93cb2124944645f70f635dc25951184ee026196bcdac7517b64b13c25c6d75
MD5 8deb9192e2acc2cbf2916b67585a16a1
SHA1 eff6d78c6db8e0e78427db0505a565b80990845e
SHA512 e26ee9cd743a1af1fb44d0121b0e396e12cc9f26a81b1df2e5b8f12d43dad3bde6cd47a8e2b7c5be3bbf08ce0f620085acccc2c4021997ebe3ca4f18b2a364b6
SSDEEP 192:m/j9hXPDQRxadxfuQ04qYuHfgBkpeqoDdu0UFruxhuGKDCMwAI5V:m/j9hDQRxadNuf4qYuHfgBkpeqoDdu07
TLSH
T1E9D1B45A6FD71224DB1B42B8CFF08957F57F12660247DE070A685174DAEE78CE0AB8E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 c7eb68947fe49ad95124590740eb69db78d32483c5acdcfcdf854adbf2bf317a
MD5 81fdcfe6e02f68cbb26d2d8f3a68d8f9
SHA1 f04622abe3c6aad76d844eb1e2137d01f85d45f3
SHA512 0a5cfb453f571083a043c5abeabc1bf81b65cff6cc7537c02e1c7304fd0a87361869c8c8fbcaee69bc990b13912c9dc00a6bf00a332c988b180fde7b738eee4f
SSDEEP 96:3aiTIejXPD5ZBYzdXCA/IyhCmqvDyTL84WBLgBSFkieo3xlrJk5+Up1pz+KhC4hJ:3nk4PD5ZBYzdl/IJmqvuQLgBSfeoxhJ8
TLSH
T17EC1B3564FE61224DB0F83B8C7E089A375BC60660247DF4702695278DCE6B8CD4EF8D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 a2d5eb31df0fcac34bac291156abc19183a32a0caf673c69c43ec9ed9602cc33
MD5 e45cd0123a07be25a24a5287d343a775
SHA1 546aa863a30b0359f15e00928fa832e4673560f2
SHA512 afed95744edd07f58bc65b6624f70ae38e50c7b9a05c9fe5c29fefa4088058f754284d49b2faa30490dd85b224b6efac55ef0e1d0d3b097794fd5138cfff542c
SSDEEP 96:y0aoYIejXPD5ZBYzdXCAkIyhCmqviyls84WBLgBSFkieo3xwJk5+Up1pJ8hb4hUe:y01B4PD5ZBYzdlkIJmqvN1LgBSfeoxwe
TLSH
T15BC1815A4FE65229EB2F83B8C7E08D4775BC60264247DE4302A95278DCE6B8CD4DF8D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 4d9d78e21bfb918e0a23d4b45063f7bc843975210e48e5ea670d55c1442777d0
MD5 f6893f2283f9db2cbb3f8ca70b972a2d
SHA1 8d65d6d83e081267a8671f4bc3e726cb5a63c68e
SHA512 cd448cfac570f8484b90ee97b75e4fa845337e34aac858c034da38f657d477d2850ab8168bcdce5c627054ad8a61dc202533e234d217dff2d828edd351e750cb
SSDEEP 96:DETEhQwmn2aIan+JSVeYapZBi6mmmx+mDmrmgmORiu:DETEhQwmn2aIan+JseYapZBi6mmmx+mm
TLSH
T1FCC17CF7C3E5856D8A1196F4EB15AE1ECE2D0A14431C3C66C8E4BE4F97E2872D21139E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 a1ce6a7960a2e1af380ef2085c22996ef6925226365e15010cc9e3601e04f061
MD5 acaea2389fb72c73d1dcb3a728cd9225
SHA1 d8d6db5310a15c6eb871766d2dbd1389c5e538d6
SHA512 ed10527e8e393544d5138e43be62313e7b2250bf82e507d9f4346e90a70a3a0b657cff6d85fe09a1e8ed7fa14a71641070699f8f9da1e39460199f59137bd3a1
SSDEEP 192:DETEhQwmnez3Vm+aIan+JsFw+1/PI7wE9qHNmYmmmgmx+mDmemr:DETEhQwmez3Vm+aIan+JsFw+1/PI7wEM
TLSH
T1F0F19DF7C3E5856D8A1256F4EB15AE1ECE2D0A14431C3C6AC8E4BE4B97E2871D21139E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e7a0418ba637387854ce19540e22d201ef70ea6ffb4ec2a308edda12975bba16
MD5 02da7bcf0c5c832186723fa4cf98b70a
SHA1 f0445d2bc60e164b4b46a1a9c4f12f0d50527f54
SHA512 71d069eee509d0dc4a63a0a2a387db38efff51f2313c086fa13e5a99026e562beab78f14575578a3fac166a11ee6fd40f40a79dc9c9b58f3749d7e5f45cd77d6
SSDEEP 192:YRveJh9YCHmAv7gpAPRp2iLV99Hsb+WNnaR46h2fQ2gTaMmFlGVyIsnAUgtaJ:YRvyfYcsUX9/wcP242oarle8
TLSH
T1B352C62EA954753B6CCBC329FA61B717E7F5102125942EC8EAFC8A1C08D79CC321702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7c350c28e3474fad3221a9eaab86acb922afc830aacabcf1d7894e4ebdf266ce
MD5 1e3fe63eebb1b877af8f98d9a451b5b5
SHA1 bfa1dd9219e113e3fc55a1b8c315179c62edd92f
SHA512 b15165e3ed320e27cead6e20770aec2f9768bc9bf9f28a72346d358470e65bb8276e7dd49bea05fd55938b47271a9f984d06a0e082bc936417e09f0bfa3471eb
SSDEEP 192:YRzcBheJh9YCHIhv7gpSPRpUW/4w099Hsb+WNeLQSoaR4vVcgQ2gTaMmllGVyIsB:YRzmhyfOxs2Xo/wWKcV2oaPlee
TLSH
T15762C62AA954297B9CDBC329FA21B717E7F5102265942EC8E6FC8A1C09D79CD3217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5df99f06b40a65fb2a309a8ef26ca316123c11a67571817f7fac5193ff3fe260
MD5 42c51243e1b2d9d936dafeb4f153157e
SHA1 613a6fa13ff4a55252fe23b6d97df6a3c852cf74
SHA512 63a9e0f1390212a922b2bd6d3bc86e1b0bab7f5444775497e22e8b05da78f87826ea3868bc39f483a444690b16b1b9c60242a721382f228fc288aaec0ee8711d
SSDEEP 192:YRzcBheLh9YCHIhv7gpSPRpUW/4w099Hsb+WNeLQSoaR4vVcgQ2gTaMmllGVyIsB:YRzmhCfOxs2Xo/wWKcV2oaPlee
TLSH
T1ED62C62EA954297B9CDBC329FA21B717E7F5102265D42EC8E6FC8A1C09D79CD3217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2c44e9eb42dc506af3c8867ad7507c1ecc38e46a62fa5537471ef0c7e54f0ad6
MD5 adfb677f8eee8b3f0701e6c171debc1f
SHA1 f0ac045e3c75c4c314128b6f0da5d5073f2b8de4
SHA512 62e70ace3954a3c31fc83368123d844c1db876918ce38377986019b227989fc3d79785703cff427e566b18832a908655564ea84273891228b1eec532cca91041
SSDEEP 192:YRzcBzeJh9YCHmAv7gpAPRp2iHX99Hsb+WNnaR46h2fQ2gTaMmFlGVyIsnAUgtaJ:YRzmzyfYcsUXL/wcP242oarle8
TLSH
T14252B62EA954753B5CDBC329FA61B717E7F5102225942EC8EAFC8A1C08D79CC721702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a3d0c5f713703c6ee9e50426d0dccbe267cd1b65ff38f476b42192f1ef668716
MD5 c0e09a4388b4a09126cdcf6cd76526be
SHA1 528aa8dd05ba53f8fc48b7e6dbb1f733b47ca41f
SHA512 4dfb5314466a0778e6606f4e4c332baf29c14c8258fe0dd7961523d0b62ba2ebe01f60c076534cbca89c9a6330ac3ff588427b9f924a2d94ff2da122150b5e37
SSDEEP 192:YRzcBAeJh9YCHm+v7gpAPRp2W/XM/99Hsb+WNHVlaR4SxeOQ2gTaMmPlGVyIsnAq:YRzmAyfY6sUXs/wQTej2oaRlee
TLSH
T1CA52B52EA954293B9DDBC329F921B717E7F4102265946EC8EBFC8A1C09D79CD3217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 44fd1d02c74f13d9f3a7301c9bb0d3693fae5462f966a73bcd2317c81cc1f868
MD5 ccb554246de0e1a9e5df2373ee910bd7
SHA1 3ab32d871f1dcc6d04c9d0e4caf3731bafbab78c
SHA512 e91dc4a99a2758a03da19a449a83129dadd1360152bd4fdb3236662db054bbaa118d87c3a7e3d4df0f3e5ad6780f796d57c3ceac5206b964c134343781b17b55
SSDEEP 192:YRzcBheJh9YCHmhv7gpSPRpUW/1Me99Hsb+WNeLQolaR4NLESQ2gTaMmllGVyIsB:YRzmhyfYxs2Xp/wNiE/2oaPlee
TLSH
T15462C72EA954297B9CDBC329F951B717E3F4202265946EC8E7FC8A1C09D79CC3213027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 82085f58435b7b7a260780dca3ee69a48427de11b3ece82d53af0d56f36fd555
MD5 92547e8f34c99d1b69c0e1d957604d80
SHA1 4ca5a2d93853b96b7fc565a0e16045bbcee47e58
SHA512 aee9857bb3f81b98b9310e49ebca2773ad80f91201f0efac2260b404123571baef569acba1d144b7aa20664020dd07820f3547f4604d3bc6c7d155025f48eb07
SSDEEP 384:V3jBM7KxkXqKf/pUZNCgVLH2HfgslQwl7pLuLcifTuXODBU+ErU3bwxHGak5Je0o:VTBM7KxkXqKf/pUZNCgVLH2Hfgsi87pL
TLSH
T1DE72FA67AC4CAA370F94D6CCD827BE4FADB5020B65DD886883FA581903D5ADF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c1ff25fe3e46ebc47d04e717a29e4708dd7b06de51b5a01a824d0473df8583a5
MD5 6c05a91b2926852c868c403109c06fac
SHA1 392b5aefdfdf2b46642b1c20ed0c2cf86ab3b22e
SHA512 b43c77a88b2c549ca6c034e0b14c138dfd7ff375a646a98a3b5d8fae5c81bcb58584dda54179fe17d1e19aa3b94664b3b5ccedd25f7c6f909a1148461c48245e
TLSH
T169B0121180019641C04302B011C2048831145F108B09230193E0AAF5EC261B24114290
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588b82.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588b82.TMP
Size 96B
SHA256 557a56a7546434f162a90c5646014bb7dd5196845f981d4cdd034565798d3c5c
MD5 93b6ffc1993a3127700a74621585f440
SHA1 a3604a2348da0fa8f5f6bc06d76f29a7fedc63a6
SHA512 d60fec758d67de46710b4c8b05924506961f55ca6befe7538cf253213df04e931013092d9b0ce5e954c6c8af25ffd2290fc2f3837b000353623d3e3d51fc4dc3
TLSH
T155B00255C2526216D08257B0359695DCB260EF3DDA03131292E06AFBEC257754A255A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 080f0bf6586a47d24396f272639df30efad016bc4ecd545fd98ecaf5596e2cb4
MD5 b9d8cd53a6277a3da407aa33430f652c
SHA1 8cb6642d656f48c3db6c12311ee5cb212091aaf3
SHA512 4713f3115c51e5a23b909b6d2dd9fc27cf874dac042fe866835f7ef4a0d512f00d8b0ee2ef3929d68d40a503cea4c2cfc3f4e0d18f234036dc65ecf3a81d3db0
TLSH
T11CA002502AC96C09DC1903F4A095F54533107A996186964771A01075D85B96143C74C0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 202KB
SHA256 38629e812b95379653e5522ec6b27d62c44ff7c5edea86e224893288ef878a68
MD5 3ef1143c1a42fdde9334bfda432b2455
SHA1 dbf2ae968b61153a2c4fb060a47397654f1caa4a
SHA512 a3f1876de3d994e843e94e2bfc3a3181ce6e55f02c8e44ba392f3119d64b68f386ce1e024f3ac315e2f3df25e3a354c617d44378f5e646a24ca9f6656d467955
SSDEEP 3072:5rotnuJlJJpmE9KtqQYKlxuPDFYpMgNLh6l++J3qUQm08KMWF0bFTcVHr6z4aw:5WMJJpDkKKl6vgNEl++JjcMW2VcVLjV
TLSH
T1F61413705F0EFEB6617B87DB190B6D990CC6CDCF0908E96931E12F4619AF3218A434B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 44677346ac6859a3a6618612f1a3f4dabb7ad05d4f0249a4c6e469f80ffb2a29
MD5 c3f226448cc2376600e71d0e64eeb076
SHA1 a2d6217a2ad1d31d8a70da98e92a198f36f41d99
SHA512 31cbd36882a03873160e4acd5ed0c3bcd940a7828c6e1a6df6e98ac963fc9f9470f2f679a239b31b6409cac7bee903ccaccd8e62685e0143919cfbe1ef531228
SSDEEP 1536:ubIP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNJm:H++J3qUQm08KMWF0bFTcVHr6zqm
TLSH
T1AB9312B9991E7D79636BC296A0179CAC8CD3CCCE111055BC30C76F0E18BA392E31B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 201KB
SHA256 fc99b0b14b0d92de66e07cf7bb7cc6a619926cf6f3caee9318a8f07ad94799ae
MD5 e8d67adf1df0e85e26b7796cf5a209dd
SHA1 ac521f605317103100deeec3620754490ee90bd8
SHA512 210a7645820b033370064b269a6cf363c6cd258edc9dad9792c61aedd88b0a8494e824852112964534fe151bf1e77084c0619afe4693323927873b90352aac78
SSDEEP 3072:dotnuJlJJpmE9KtqQYKlxuPDFYpMgNLh6l++J3qUQm08KMWF0bFTcVHr6z4aw:MMJJpDkKKl6vgNEl++JjcMW2VcVLjV
TLSH
T1061422B09F0EFEB2616BC39F590B1DA94CC2CEDD0508D96532E52F4A19EF32146834B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 201KB
SHA256 a392269fee5d175cb72ff6c7fe2df2815eb05be3837e82c04920cc0330aa7c39
MD5 35971f73608a8fe2e4f05e55beeed400
SHA1 b40d1ba9451eefe8631b600c0db6d027dcce5789
SHA512 38874c27b12e9062d24f729654690524d48222f257de7bd6b222e71571f3dd800cc3bcbb6bdf181f42a7837a0c8bd6cb31a2d77dbea0560f32ace11ea7fe7e19
SSDEEP 3072:uotnuJlJJpmE9KtqQYKlxuPDFYpMgNLh6l++J3qUQm08KMWF0bFTcVHr6z4aw:hMJJpDkKKl6vgNEl++JjcMW2VcVLjV
TLSH
T1DD1422B09F0EFEB2616BC39F590B1DA94CC2CEDD0508D96532E52F4A19EF32146834B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AOB-BYTE-main.zip.crdownload

Path C:\Users\Admin\Downloads\AOB-BYTE-main.zip.crdownload
Size 131KB
SHA256 5e24acd77d20fbbc86962818ba8c52daf67948032dfbbd5e34f21617853885ed
MD5 0fabd6d63ee5f3efe46418c667d0280f
SHA1 a78f9619c4193fa60c1eafe56aeba605772e991b
SHA512 78366120263f12db68d1c41e5795a3847b2e169b9ade50c8adff86858032ae7b4f29688d2506d6b55bdd445e4589a75057549ff3ea80d1672f6b299754bacf8b
SSDEEP 3072:pI2oDjdnw7OJsojgPqqXpF71jBzleo+OEWY6b:pxoDRnwUgnF5TEWY6b
TLSH
T1D1D3124502C4D92FF0818A7376032AEC95C5F766C5B770AA8E49F459F682D0FB2F4B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AOB-BYTE-main.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\AOB-BYTE-main.zip:Zone.Identifier
Size 157B
SHA256 e6be51434f4384a34fd144e6ef31a653f230a1793bb108efd73fb995dd8947f1
MD5 0cbe446555dfc835cbda7293dc80a582
SHA1 afcfd150a5165947268a71b87967adc2d4fa0542
SHA512 1b1a27c92be290a38c02dfbbbec3eff13a5675c810875db88a761596a504fcb7fb89f6afc26f9480714b329efc2f68f8e5381e3066d1d339d8879efb281f68ab
TLSH
T133C08CB24D008A8C0E106CF0B2DB4C2A70CA3244CD14E6C8AA644081D85482696E980F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3356-0-0x00007FF700DD0000-0x00007FF700EA6000-memory.dmp

Download