hxxp://www[.]gasesdelcaribe[.]com

Analysis

user interaction
yes
max time kernel
299s
max time network
301s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.gasesdelcaribe.com
Sample260528-dbw28afz2w

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1448	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134244102592049081"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3356	chrome.exe
3356	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe
Token: SeShutdownPrivilege	3092	chrome.exe
Token: SeCreatePagefilePrivilege	3092	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe
3092	chrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 3092 wrote to memory of 1312	3092	chrome.exe	80
PID 3092 wrote to memory of 1448	3092	chrome.exe	81
PID 3092 wrote to memory of 1176	3092	chrome.exe	82
PID 3092 wrote to memory of 1176	3092	chrome.exe	82
PID 3092 wrote to memory of 808	3092	chrome.exe	83
PID 3092 wrote to memory of 808	3092	chrome.exe	83
PID 3092 wrote to memory of 3664	3092	chrome.exe	86
PID 3092 wrote to memory of 3664	3092	chrome.exe	86
PID 3092 wrote to memory of 3424	3092	chrome.exe	85
PID 3092 wrote to memory of 3424	3092	chrome.exe	85
PID 3092 wrote to memory of 1396	3092	chrome.exe	87
PID 3092 wrote to memory of 1396	3092	chrome.exe	87
PID 3092 wrote to memory of 1476	3092	chrome.exe	89
PID 3092 wrote to memory of 3460	3092	chrome.exe	91
PID 3092 wrote to memory of 3460	3092	chrome.exe	91
PID 3092 wrote to memory of 4720	3092	chrome.exe	92
PID 3092 wrote to memory of 4720	3092	chrome.exe	92
PID 3092 wrote to memory of 2360	3092	chrome.exe	93
PID 3092 wrote to memory of 2360	3092	chrome.exe	93
PID 3092 wrote to memory of 2520	3092	chrome.exe	94
PID 3092 wrote to memory of 1256	3092	chrome.exe	95
PID 3092 wrote to memory of 4856	3092	chrome.exe	96
PID 3092 wrote to memory of 3436	3092	chrome.exe	97
PID 3092 wrote to memory of 3436	3092	chrome.exe	97
PID 3092 wrote to memory of 4984	3092	chrome.exe	98
PID 3092 wrote to memory of 4984	3092	chrome.exe	98
PID 3092 wrote to memory of 3356	3092	chrome.exe	99
PID 3092 wrote to memory of 576	3092	chrome.exe	100
PID 3092 wrote to memory of 576	3092	chrome.exe	100
PID 3092 wrote to memory of 3268	3092	chrome.exe	101
PID 3092 wrote to memory of 3268	3092	chrome.exe	101
PID 3092 wrote to memory of 2084	3092	chrome.exe	102
PID 3092 wrote to memory of 2084	3092	chrome.exe	102
PID 3092 wrote to memory of 4292	3092	chrome.exe	103
PID 3092 wrote to memory of 4292	3092	chrome.exe	103

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.gasesdelcaribe.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff9427c728,0x7fff9427c734,0x7fff9427c740
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2036,i,12014849713899963710,2917618157584733995,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2168 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,15525586799406268109,9276139664606544134,262144 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,13243612852308239942,3389025991262691413,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2516 /prefetch:13
  2⤵
  PID:808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3124,i,5552307784338872018,5176965653302298836,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3116,i,4294840219312640603,12496624941342739247,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4304,i,18291902271315950131,12947477663883565247,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:1396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5344,i,12399095690307215387,7114352734198788520,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5340,i,14900898699909854700,7819151940598225205,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5716,i,941982400982574217,18396311661288404828,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3320,i,15451448732141058836,18423482492326813006,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,11009643926963569422,8448622472784284955,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:2520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5856,i,18187100529226349677,14909200034717432869,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5980,i,5578231613630601573,1811116639829459996,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:4856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5948,i,16379491559427305801,1395375787666683858,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4388,i,18266647865605146351,6181563999427121986,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4400 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6008,i,10452846243154116013,8548164176611012653,262144 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=212 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5540,i,393173571902031591,8709745807771303397,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6012,i,9727483970423493438,4215156236828851063,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5252,i,15693276387179387886,5983112831747644923,2097152 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4600,i,1103030814096265240,200896250802858935,524288 --field-trial-handle=2124,i,13199317080998542986,941878333091477615,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6408 /prefetch:14
  2⤵
  PID:4292

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4220

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

93959c48-dc73-4c48-8d69-b3ba6fb49e51.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\93959c48-dc73-4c48-8d69-b3ba6fb49e51.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 b7c8371658fa06b429256d967d1428219b877ea3ec3e0286d5ffa44370c332b7
MD5 97e9638f7dc0b2d5697f99c99d5bf951
SHA1 93d66182f5d2a9ba511e1c54c4aeb1db44f9478f
SHA512 a80e11afe9f3dedacfb918ff6f96b3eac6e2951ccf677166cfb834a72b49dca282798bbbdf9ae1e12c3fa8ae2bee0e88705c535c33147664b91ba62f7b3b5970
TLSH
T1EBF0F4A6CD21AC3708FD1B6870640B46FB55136B2B81485F3A3C930D8FF063F418582C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 22KB
SHA256 74d149db374cfdc14467e0c3606e40f90566484be3beba4dd59805877d7a4f6c
MD5 dee5d7336cf66f814d51189e1325cedc
SHA1 950ee070be776aef516d3dbb2da4701a0ea959f9
SHA512 1ed4270160544a3483e1b9e5427bff8fda2159035681be1d07cafcc9dee6077fc7c0152a98f87a039f72b04f522d1d0c57da78648b713d32a4e828cbe263c184
SSDEEP 384:hDCwlmOU+MLG3TKYFSyCxHbfz+QkiWh48Q2iEfGoyh6hETNR+bWqTKdTYSIkOinV:hDCwlmNveKYoyCxH7z+diWBiclyHNsby
TLSH
T16BB2F19AFF3B56760B44546B3E8B0682851FE95A9D9E1C34020F289603CF775EF40325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 17KB
SHA256 0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd
MD5 825ccd29ac102fcadaf92b2343d5917b
SHA1 24472e766cfac5b82a73b219796556a0a3702bd6
SHA512 71b8e7c0813227f5efa4b4e0561978b13672f46ee441bc222ad77aa46a32f0f44a5dab3ef038bb3418190e69dced597a79e77566da01a259f1cd6b5298a08662
SSDEEP 384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
TLSH
T18A82BEF49EA4241CDDE2DFBCE09243D635E8FB03481A9C516BCB46C27459EA2782C71D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 73a678c9cefc224b7cca75ae015863d0b77bac8c3b7ff834e8481979e07ea4c4
MD5 815f67348cfd98efa3c6d1562b4053b5
SHA1 303837a78ea8c46a5710ab84b0df2f3ec4ad486d
SHA512 a94e08fba6dd20be3d0a157ba06e292092ad1d082e0d1c047233e1515878818994d1a2b3fef80c72bacd6dd1d8c4d18b338e549757b65f60045895e9186fa1b6
TLSH
T1FBF09B5C11554FC5DF2421F30C826AC56B33B838455ACF138F7BB855C4636B4B5355AB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 24d7b29520da10b9d2c8ffc3a073389dab7897549b2281814c709bdd0e1291f8
MD5 75c8517c33fa4854f3e5d333df870e2a
SHA1 8fa9817817e49c5d636e2e8eb4a6beeec9dfd111
SHA512 b3e30d68a13c622f15ceb3ba79be944c3cb81e7d67673de4e8a20b38816160ce1613497b4b5d70b99dd5f1cef1aca73dfb6f51de98394da2e3abfeef07fb469a
SSDEEP 192:DtMdlwhgtbTN7t0yVIaNKTWM8rL3AxUfPZvP0Xg6X622D4Dl5k2cg:DtMdlwhgtbTFt0cIaNwWzrL3AxUfPZv6
TLSH
T17F12CFF7C6E8862DC81266F096146A1FCF2D1AAC536C3C1AC8D4EF4B93E2971D24165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 e20443b750924f24f6d949b2a007dbeda9d4a27e2713c818661140b2a87e432d
MD5 375afed78c5a8e7ea6df6f462f9ac268
SHA1 650920806a8012bc44bc074ecacbefea647f18cd
SHA512 8ab0d0065a6419e04a345ca3c99a787701e4f61a599f5e2d189e0e75eac6e1d4af68e503fe1d3de62db9cf0352d42c496832f755d074f52cdf1c31a9fc4a7163
SSDEEP 48:YALlhSMvd1sPVRsNVXLs9foKsifsXosQ7bX6s/4s/gmzs7Tviswvk8vlBv7s6v/z:DtSVyVIh6A7N/KTWM8tBL3rQK
TLSH
T11491ECF3C3E8867D891191F4AA252E2BDE2E0A54436C3C66C8D8AF0F57F1971D24054F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 642de381072df5b5a2a9200f83c8658310c8cbb013db5127aef63ed9e6b4d48a
MD5 fcb694d6dc9aa9deba84cda6fe554c39
SHA1 7bcebbc1da7b09f9394bf3a9719e791186124292
SHA512 4e68dc7d66237104fc60c121fb1909c017c73ec2756a8ab9cfffc54abb4a6a8030802fc3010f9e6c3dd0dfdbceb96898ad473c3833432bd679d9deffcfe4cab4
SSDEEP 48:YALlhSMvdeh3qsq7qrsPVRsNVXLs9fo7bX6s/gmzs7Tviswvk8vlBv7s6v/v/sBs:DtMdlwTVyVIaNKTWM8tBL3AxZjfPZ2
TLSH
T122B19DF3C3E8867D881192F4A6253E2ADE2D0A64536C3C66C8D8EF4F57F1972D24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4bde630-4bc3-49ff-9b26-b160c435b45e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f4bde630-4bc3-49ff-9b26-b160c435b45e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a31a20686e813976bc70b900c4764c5769fba8d1429d30d3d179349aa141fef3
MD5 937b6fe8563ca2b070cb9ac1fe63cd4c
SHA1 89687f365f5e957da7d4301a23d6d2458b6c581b
SHA512 f0d3ed23f04f0f78753970b4676e2f0265b64f3a0f0c2827b8a8ad10e1adc3d89706e7a3f6f2de3ca0f061afea4b53e55fb29091fa3d6837a92807b57f0240cb
SSDEEP 192:GRhJigLnSv7+pAPRp2FY9uHSKb+WNnYao3t2j/2/esx+VyIsnAUgE:GRhJv+6UX5UbDa2b2UE
TLSH
T1B642B52EA950797B6CCFD229F9267B67E7F5112221841E84E6FCCB2C04E75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 482024c7baf1ff4f0a4a01f09e8ba93f20d7675e02116ca2dd38abefd1003fe3
MD5 d050d519dc6c23ab8578bbcc490cebf6
SHA1 abf4fd5943ed6c70103f3880c8f0132ffc658258
SHA512 3e744279e94f9086e06207b075591768f10b21db8554a674119673cea0f85e14a3af668b28313e0905a435acdaad01dd5b00bb57bf3262a7a9a94467dd69ee90
SSDEEP 192:GRhJigLnGv7+pAPRp279uHSOb+WNnYaP6/2/ese+VyIsnAUge:GRhJvy6UXkUfDP021e
TLSH
T14242C72EAA50757BACCFC229F9367B63D7F5112221D41E84E6FC8A2C04E75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 10f87377135b9aee56950412b710594f543d97d53a143c25ed04eabeaa707c11
MD5 4525dd3d11149db15b075c0184ae1406
SHA1 5d6bff3c8956988c0d9266ce70d144a8d0ef4b70
SHA512 18f8962cd4b59e301348e21423e0b6c743411f99955ca7a23a5bd84dcc4b42c8632ac5815bcf21ac18951925488af430c4b9228a32d9f0546b3d0ce77b058aa9
SSDEEP 192:0RhJigLnSv7+hqPRpYFY9uHSKb+WNnae53t2Ft/2/esF+VyIsnAUgE:0RhJv+6+XzUbvf272IE
TLSH
T1C952C82EA910797B6CCBC229F9667B67D7F9112222941E84E6FCCB3C04E76CD211741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 608405be117aa36ac710cacf4c7699631f01b9da82af408bcc5182c475733ab3
MD5 6109b82e13bd86037b1a3ff5eb599ba0
SHA1 e130b0da59cf691a7188bfe038a10747008f050b
SHA512 712c98e6d088eb1ad1b2903f78495c7561db837bf067e4f571a7cd3b31e7a44554c880ba69199dd5c57f750ad972cca53d154adf2d779923150108ef3b377080
SSDEEP 192:xRhJigLzQv7+IqPRpYxwIo9uH3WKb+WNnGSwUwebt/2/esF+VyIsnAUgE:xRhJLM6DX7UvXEe92IE
TLSH
T11752B61EA910797B6CCBC229F9667B67E7F5102222941E84FAFCCB2C05E76CD211741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d7dbf27fdafaa70140a43feb9e78067dc307d30937a096adaab02a65eb1e8ee7
MD5 ea39439f407de7e7aebea16a2600b7be
SHA1 c6d6c4616519bf74b7e56a2ff906153226a15e52
SHA512 abae84b99941aa20a1ba9dbc3b86cdc2d4b03b6885e8b22d6dd9d53c83ac32a6595a5968449dc3b60376bd73e13c8428fabbc195fca76ea4f746049ee63769bd
SSDEEP 192:xRhJigLziv7+IqPRpYFY9uHSKb+WNnGSw3t2pt/2/esF+VyIsnAUgE:xRhJLu6DXzUbXC2n2IE
TLSH
T1E652B61EA910797B5CCBC229F9667B67D7F9112222D41E84E6FCCB2C04E76CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 2d0c974e923fda0aae64533b4941fbd2134488d160f4142c6420217da413ec9e
MD5 49c3cf6896ee7f3c0c129b76b0e12b8a
SHA1 54a38d4781ecb5d26185db3810935be5488206cc
SHA512 938e9fc244221024530fc93937bfa8455a22f333acb9f6589083b183605006d485fa714b71715c4dff822fa009b67d13bcbdf77a2b7ed65feb759213e5a5bf1d
SSDEEP 192:xRhJigLhBv7+IqPRpYFY9uHSKb+WNnGSw3t2pt/2/esF+VyIsnAUgE:xRhJ5R6DXzUbXC2n2IE
TLSH
T12D52B71EA910797B6CCBC229F9667B67D7F9112222D41E84E6FCCB2C04E76CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 87abfd6483e055ddeb2f8fc2f483f91af443de3130ad7f6cceeeecc94a6c2511
MD5 04c2655e775a571e3b09dcdcd782d924
SHA1 84dda5dbd4088a2a3591384e8279d568339c383c
SHA512 38ea57f7244c49bbd8e846e3f0d5342b6c186f24c011ef661cc6a4f6836da0e0f816f76146075af79a69abcd50476432db60bf14c0daf6c81fe144ac588ce833
SSDEEP 384:fFjLm7KxkXqKf/pUZNCgVLH2Hfgsl+27pLuLcSjBsXODLi+ErU3ZSHG7Ep83wCv:fVLm7KxkXqKf/pUZNCgVLH2Hfgs427p+
TLSH
T18C7208676C4C9E370F94D6C8D8267B4FADB5024B65DD886493FA982903D4BCF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e87874af14f1556f0fbedf5068cff64b9eb8632c9520dc75a3e233c9b9b32c0d
MD5 f9007cad95107686f413ae74a2119772
SHA1 76eebe2ccd021cba92391070a66c71f2ab2cebf1
SHA512 24d5cf4812a7635f4b3aa2d0aa63e9e528eb1adc4ff61e76207b2b3dad60070211b19c5f3f6a1b8d2afe89741e0d6f7eabe4ff5f7177862fd3e1455d9cb2c353
TLSH
T1BCB01240C4415245C04202B0214214C8B114DF24960A170553E0BD2BCC756628024091
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b495.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b495.TMP
Size 96B
SHA256 598ed9166e2ad8eb93f0ef831ed73a9eb092115238c94b07bf899a536f4470ad
MD5 db51f6236d3c03a101865b87d4c123db
SHA1 71dbde133c69d16dbf600788c94755d4f4cc5631
SHA512 bd5418a7cbfaf5b484df6c7167d759b60938f64f243ac68224e0b5a7023f6926acf16096d09ba624dd64499a2216007daca9c180fe3a52d99b70a871fc47ff44
TLSH
T152B002E5C6026312C04203F42699A7D8B1A0DF6AC60327E2A6E11A67EC26671956D560
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cf85cf97bf812ed04616a4bc8267a22f60f2b12477f9b1f3a8077576de8017a4
MD5 3f3175c3383e0d1303feb75bc6b49a0f
SHA1 5336b8c016290a8d2612a79c459da8228c120ff0
SHA512 621d022e2e314f4cfcd19ed1130416898c484feae81a9c05d5fbd31bf1e6dfb2a24b47f9768437589e56fb180f0c9706125f9154d50367f53d444be999e4ee95
SSDEEP 3072:i8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:0wCcmXKegIh6jh9JvexhQ
TLSH
T14AC3125928273DA688FD6EB3B44733828AA313A16D05F54E90C8DF0B45CDDB915EF874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 dd157f606659d630d1e6757e8a8df130dec48c5bb49b3c799a828d39319706dc
MD5 0aeb193f2055e0ae5be517ce1cc3f6e2
SHA1 522caffd9b11caa27140f68dd0f05bdc51a440bf
SHA512 07a63d760ca50f13f30a74a8babacf773c061662950bd113bf9d31eeb5f3fc53aac92de5498427e65bc02df9bc8818e0fcfdfa8b91bd890fe812f8b54cd89788
SSDEEP 3072:N8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:LwCcmXKegIh6jh9JvexhQ
TLSH
T1C7C3125928273DA688FD6EB3B44333828AA303A56D05F54E90C8CF0B45CEDB915EF874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 13a84f2f6c5e87f00cc16e3decfbcd6fc33cec38dd81e0578b78b1b436a49661
MD5 19ca64f2a22f1e5f756ef0483bfaf994
SHA1 a133fe88945d95d12696e77ee8fdb3234188a800
SHA512 9a91cd1da2764007d166b67a498a049b5eb232192b5f8692c373089b9ff5146d8b3418fdf35a828a286601e2eebfdcf7eb7cd3b761a466a2ac66c00428f35e4c
SSDEEP 3072:Vxo8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:HuwCcmXKegIh6jh9JvexhQ
TLSH
T11FC31259282B3DA68CFD7DB37043378286A203A26C05F54EA4C8DF0A45CDDF915EB8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3e433cd2e3a1596e6772a0b3f7a66da72cd1579c99a473038b3f75622e0bd38d
MD5 7bb1baacd8b6fb6c73e8e8f88ac00e31
SHA1 eb2eb6950fb51720b107b1f0811c4964f51d28fc
SHA512 81a20775d63a6aa0ec2da37c397c6dd40a34b079221baeac5b1c9b4aa5a083eeebe304b1158d0dd024b49104f5c8f6dd9ddf0fbbbc195923c5143a515267f5ca
SSDEEP 3072:sxo8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:uuwCcmXKegIh6jh9JvexhQ
TLSH
T10DC31259282B3DA68CFD7DB37043378286A203A26C05F54EA4C8DF0A45DDDF915EB8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d9b68ff042b1806925815c269783fc2d9f7efdcee405c91b8e44a6bc9c3372e3
MD5 7be94b3e92ab917240bcb04f6a8832a7
SHA1 d5c8c568a6262c4477ecf2822d848583ef13a106
SHA512 597e2e5a8b267fd11c5454e445e6c21ec3730f57ec70d288f087af8e2141c69f9467cb0f3f8323bd8f6f3a5d6068ab11f79ea3f7b9fe95eec2008ed34e4565c5
SSDEEP 3072:nxo8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:xuwCcmXKegIh6jh9JvexhQ
TLSH
T11FC31259282B3DA68CFD6DB370433782869203A26C05F54EA4C8DF0A45DDDB915EB8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 9eb28754a3e1e3248a8fe15928770df0314bef1698fba7e227021fe3af622b85
MD5 3b4642a5627739d98814079039783e4e
SHA1 3e30be9714e8bb5bb5e97a5bb8e4caef422c68d7
SHA512 b1507f08525d204929cc2effe7dc4c942ac0598289793c043bf39796a3467339393a2b6972f1f6ba55c5c5672d93f2cec4e4678adac3b47910ddd80965d277a6
SSDEEP 3072:d8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:7wCcmXKegIh6jh9JvexhQ
TLSH
T14DB3125A28273DA68CBD6EB37453338286A353A26C05F14E90CCDF0B45DDDB515EB8B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f360c7a61d49462df22b5c1690c642a416efd6596b2db0b8d2e55559821936e2
MD5 d69de8e25c50b531a255127c0336b731
SHA1 e61648962a6149a40c886f80dfd01db4f22d289d
SHA512 de77647f601f5f1a3472b5b214916d8b865d3c9c005f525bf3b051933484ee864d12c4eb1479f5c1382107ecc359eb8a825be0067c0f356f3fe80afcdae2b8d1
SSDEEP 3072:qxo8uwLcXcgVXruSixWgL0rF6jh9JDvexqw/w5nP:8uwCcmXKegIh6jh9JvexhQ
TLSH
T10BC3125A282B3DA68CFD7DB370433782869603A26C05F54EA4C8DF0A45DDDF915EB8B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download