hxxp://boost-websites-237-newscorp-2026[.]pages[.]dev

Analysis

user interaction
yes
max time kernel
300s
max time network
297s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/05/2026, 05:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://boost-websites-237-newscorp-2026.pages.dev
Sample260529-gpmx9adv3k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4008	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134245079477868366"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
5792	chrome.exe
5792	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe
Token: SeShutdownPrivilege	1164	chrome.exe
Token: SeCreatePagefilePrivilege	1164	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe
1164	chrome.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 1164 wrote to memory of 516	1164	chrome.exe	87
PID 1164 wrote to memory of 1464	1164	chrome.exe	88
PID 1164 wrote to memory of 1464	1164	chrome.exe	88
PID 1164 wrote to memory of 4008	1164	chrome.exe	89
PID 1164 wrote to memory of 2012	1164	chrome.exe	90
PID 1164 wrote to memory of 2012	1164	chrome.exe	90
PID 1164 wrote to memory of 2136	1164	chrome.exe	91
PID 1164 wrote to memory of 4968	1164	chrome.exe	92
PID 1164 wrote to memory of 2136	1164	chrome.exe	91
PID 1164 wrote to memory of 4968	1164	chrome.exe	92
PID 1164 wrote to memory of 696	1164	chrome.exe	94
PID 1164 wrote to memory of 696	1164	chrome.exe	94
PID 1164 wrote to memory of 3248	1164	chrome.exe	95
PID 1164 wrote to memory of 3248	1164	chrome.exe	95
PID 1164 wrote to memory of 936	1164	chrome.exe	96
PID 1164 wrote to memory of 936	1164	chrome.exe	96
PID 1164 wrote to memory of 5072	1164	chrome.exe	100
PID 1164 wrote to memory of 5356	1164	chrome.exe	116
PID 1164 wrote to memory of 5364	1164	chrome.exe	117
PID 1164 wrote to memory of 5372	1164	chrome.exe	118
PID 1164 wrote to memory of 5532	1164	chrome.exe	119
PID 1164 wrote to memory of 5532	1164	chrome.exe	119
PID 1164 wrote to memory of 5792	1164	chrome.exe	125
PID 1164 wrote to memory of 2104	1164	chrome.exe	127
PID 1164 wrote to memory of 2104	1164	chrome.exe	127

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://boost-websites-237-newscorp-2026.pages.dev
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffdc8ccc728,0x7ffdc8ccc734,0x7ffdc8ccc740
  2⤵
  PID:516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,5376156332301889997,11273004627725190919,262144 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:1464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,3355519186869611517,5549542530969049737,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,73018175397827292,7330542560257404192,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1960 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3120,i,12769412424650359486,6804960046796757498,2097152 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3132,i,6579735310740286366,3283488456872622818,2097152 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4356,i,1031741664863176278,12091784037533721987,2097152 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,256204768962056576,9009538108811015695,2097152 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3324,i,4691246459689678222,12818243962385869612,2097152 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,318307612498132352,16467425121680629898,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,4726428440690449943,4415186464101770996,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,18062600990729337746,8948425788979568759,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:5364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5752,i,15463026291551207609,14723512698161152308,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:5372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4384,i,10580890886325110009,874411837037788241,2097152 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5836,i,12004009693953005615,16072527742515876696,262144 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=728,i,1091581252041386827,923832833549239075,524288 --field-trial-handle=2004,i,8552598889019189892,1940277525815500014,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=976 /prefetch:8
  2⤵
  PID:2104

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2400

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 52c101ae00dfd82dbbfc07ce3c8cf62dff37074086380c8dc795f7c05b866940
MD5 dcfc9060fd35b6d6c4add0d50a6b0b43
SHA1 1bc5cdd2748c5127e03d3cff88d737e85c26dc9d
SHA512 db97818530f490bd1ef228caf1993693512933074f0ef34f41536d3359cf793345203214344fd0ea2aa8b73c60735d167b7005d3b164dd28db649b7513223e66
TLSH
T15EF0F9A9C821AC2718FD1B293054474AE75513172B90985F3F3E820C4FB593B865692C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 7c69d67e0f457d82f9637ce1f1078fb31c8c15bd15bcf4cfaf56bed4bd57e606
MD5 8ae4a242159d58336e6a7a7fa5cbdee3
SHA1 0f3b9bea15bbd6be36d293cf498168e1e8a5477d
SHA512 3f56222f652d87aeaf34889b0a1f9e8cfa775939b3cfaf84ee971b26a91bdd18bf5dbd7c06835380cf2f36d36d1441c575733363fc5b89b52e17771190e2418a
TLSH
T164D080302084C401CFD1CFF1DDE41C01383C153860436F9253D958B08753775911BD39
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 ed3bf14a536de976d42e8a3e83bc8b4e10182a65dfe9058f25c85cafcf52fe41
MD5 488dd8150bdf37e4a3bc345fc74f9621
SHA1 5e5b867e2f19ab753f9ae223afd0309fdbff8d52
SHA512 b469028ddb65d4f68bd8c9e64d1f6b40a2665def1c6465452672b16a58d6a4400a51c5b053d42c33ff29858941d632be74fedfde3fd93bda99b8eb16e0bf2a72
TLSH
T1EFE0CD314D95C505CFC7CBB2FDB488853414097934029BF393897871456B3A6914DB09
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 3e7d468fb676033bcff8389f78181ae2ad433be286dc0909970396481762ff81
MD5 73d7cbbed63872c320228ddcd8833465
SHA1 445ea19501e5ef367c4e18cd5fe23819d94dc8a0
SHA512 8247f100634c61b1fcc1223b080acc35b295b183ea0dae6f51dc73f8f6eae9ee2f1717fbb886409c80f1a1e536cb645b6eddec80f7c04c24adb9e37d87142a7b
SSDEEP 96:D4tmwIaWJmUE9GhBQ6qZtYUmJeuoXLhK0Iuw:DmmwIRJ1E9GhBQ6qZtYUmJeuoXlbIuw
TLSH
T19AE1E3FBC3D8C12D8D13A5F4EB247E1ADE1E1A1843383C5B86E85F4B63E5862E15194E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 9c00bcff26de4d5c1e3e2b67cc13ab6e26a4e3f621defc7ec64858e36f6d86ec
MD5 e5842f11b6aca1f1a5cedc148ab083cb
SHA1 69e74a96a5d02bc73a120e232e9ab1a70c44d37c
SHA512 063f0b4875028c6cacec4282fa31e70ded76b6befbb9b5c9be7a26da0c931a69da72df129268096edb20ca0cca884044d46fb944e87fc69742b3b3a0d058d6f1
SSDEEP 96:D4tmwIaWJm+BE9GhBQ6qZSUmJeuoXLhKzkyow:DmmwIRJHBE9GhBQ6qZSUmJeuoXlskyow
TLSH
T148F1F3FBC3D8C12D8913A5F4EB247E5BDE1E1A1443383C5A86E85F8B63E5862E15094E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4c555c0fd1b2a0b6deea841235ef020d988585ee68675e7648e0269ddfebd09e
MD5 c4e947bcd3905aedc5c21f4e485530fc
SHA1 7aa604a020c6e2c80ada728bbef18121e7aacaf3
SHA512 44bde4124948c4134a0da1fb500e9613d1312c4bae53a5f38660c3db9abae56c26c5f3620501cab2b7c584e45fae2b2cb9bcf148bf05c3c734ca6ced06dcf5e0
SSDEEP 192:4RzzufbHWMUv7cpAPRp2q5m9BHsb+WNnuHtjc2j6ep2OrxVyIsnAUge:4Rzz+bnQwUXlUrwWy2d2YXe
TLSH
T13842D82EA96469BF5CDBC229F9267B53E7F9102225902EC0E7FC8A2C15E75CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 688487c965fa0b5c13e8a2d00591560548e82eab8759ccbcd4f44ccadbc7d76c
MD5 48aa3f79a74b8626cd1d53e4b8346d3f
SHA1 66820e68cea8de77118ca2be9566d7ced2c75a41
SHA512 afc70a180fee20ec273ec9040e35d8e77d2e20781277a08789d50c2a666905c88dc7e4469949116b9a08b1a181915bad13ad8d38e4ca10401f3ef0cf4d3bd144
SSDEEP 192:4RzzufbHWMzv7cp2PRpYq5m9BHsb+WNnuHtWDkp6ep2OsxVyIsnAUgE:4Rzz+bnLwWXXUrwWOk32RXE
TLSH
T1FE52DA2EA96069BF5CDBD229F9267B53E7F5102226902EC0E7FC8A2C15E75CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 9b34011442510b85f2948606906d469d0d90b566d1e21471aa5e7575bcbba738
MD5 c48cdf6889375a4374ea961798de8367
SHA1 72ff89d60343552ce17b808d3f39b8f7a8e7b8d8
SHA512 87e7d64b2a574b490a13851540fb15ec4775e2ac4810a51662bd5fdc4125f4e23d478ab59f411fb52e68adcb1b75baef839923bb4f1f8edd3f334a8035eeed16
SSDEEP 192:4RzzufbHWMXv7cpAPRp2q5m9BHsb+WNnuHtcNq36ep2OaxVyIsnAUgE:4Rzz+bn/wUXlUrwWmqB2NXE
TLSH
T10D42D92EA96429BF5CDBD229F9267B53E7F5102226902EC0E7FC8E2C15E75CD2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 844d3ec03467232c0b0b31852592e1d5bfd1b998c353219bbfd11d0dd2534c85
MD5 248039e3512518ae98cef47428956f17
SHA1 6b50102f479957e0c5bdc48e63949ea63a96eae7
SHA512 56f6fa2b67411fc0644fb1c73d9ea2b6838fd695e4701b9f0083f58780d47178025347ce2472b1dab91a02f1555f53e8546aeb65ea769478c186dc3b4f42e72a
SSDEEP 384:dXjRs7KxkXqKf/pUZNCgVLH2HfgslKR7pLuLcSjzOXODR0+ErU3DTHGENMAYw:dzRs7KxkXqKf/pUZNCgVLH2Hfgs8R7p4
TLSH
T13872E9676C4C9E770F94C6CCD8267F4FADB5024B66E9886483FA582503D5BCE110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 793579b1aff44f7d2861ab5a817c5b874cf170be76368fb09c5f4a28e73a1738
MD5 6ab581da3a918614624cdbc930ec2ba3
SHA1 0e67ad7475c4e882a21db970375e7e2e49aeede1
SHA512 22cf7ad7c8125947e15b5f25973056d6b3c407445dfbb50234796fd0b6fa160077bc6d448140c795ff801f933a5e5c9dfceef68e3c5c0f65365b846123e49afd
TLSH
T13FB0120080015943C05203F0514A5488B1185F31D60B1B0543E06A72D82916181140A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c0ea.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c0ea.TMP
Size 96B
SHA256 2c2c62097f25543af043c509dc5f1074e02e09cb63121714c4ddbf1af7b51be7
MD5 d3681e4d44db14305a21a2c093517bfd
SHA1 b68415e16b7b76a3df0e7b773a1011fbc1da8d57
SHA512 e92e4918e28a3aa0db17ac7b7158e1b63b5e373ad8f3c3d599ec98355d00045886fe8eec0e944034a773e533fe947886db746fd2c7e6ad86fa6e568640acf755
TLSH
T130B02200C0023203C08303B022A288C83020CF28C20302028AE00EBACE323B020AB830
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 3d1b8148242368936ead7e17dc088977ba53f5cc8c505c4eb557eb36c8a9c45b
MD5 7d7307eb4fb73cded4f1be786b81182e
SHA1 3e6f9b4ba98fee5b2a4dc8e8defb127dd0fa182c
SHA512 ba4f5f1baf8be8c65b7253c67f12ad348c880b889dc0d73ce7d695fb043f8b1948d2c66f7b70a0a7db4005371299c7dd9bb9bbf9b34cf2da6681b1b29f1264a8
SSDEEP 3072:SKFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:7FmUi21rSm8uUVNSlzY/
TLSH
T14DC31304B6E3E8F2FE5930447BEE2A145D6C0D818291C6415273AE419DEF3C71FAAB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4f94d3a45fb0d5f1b8144e5c8fd4e4408fa49faeb311f22b33f2f0b41aa008bf
MD5 5956f1ff42aea9d689c7f2ceaf63d34a
SHA1 30797bc56f055efe2009a8e49717a90f02e3b31c
SHA512 92842de1bed1120eb2579f02bbd4bd8b5053a280fd68ac5e215c227316cadf1ccb49e06b2e0ae523d22754f3f08c1626da695ca708f0be2e95ef834cc980bdc2
SSDEEP 3072:SPIFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:PFmUi21rSm8uUVNSlzY/
TLSH
T1B3C3121079A7F8F2EE99304476EE2A159D680E818291C64147739E419DDF3C62FABB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 b63c9ffa1960be603a5c433692a1254fef5ddd95b3d020181f208529c33a4c92
MD5 9c541e2f503715296969c0d94e664ea9
SHA1 aeef3b6b0681fca5a7bc771c853ef5e0a42d3354
SHA512 df084a8bc069e7ec6a79342f6d6f0c3603b95068743a50508afc00de5d740c790c7beb1290a503e23bf2abbd2c08b98910301da898cfa25c067d4b27fea87bde
SSDEEP 3072:SWMCFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:wCFmUi21rSm8uUVNSlzY/
TLSH
T124C31210B9A7B8F3EE9931447ADF2A144DAC0E818291C60156739E415DEF3C66FAAF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 340f47a254355e198c64044fa9e50efb82e81f4832dfec4a6611b410fd6e6663
MD5 f621362d18e6e717e1483d9d15e21dcb
SHA1 b5dd9f3f432982fc2e16f7c8b5e048025e7d947b
SHA512 53f3121220e99bbdbe47ba4485e34233639346ea1ac26d4017b7298b44064c973133943c41ff7315a0dd8e9d461bc4443da9bb63c00f3cb97f91f6dd272a86d0
SSDEEP 3072:Sm3FUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:jFmUi21rSm8uUVNSlzY/
TLSH
T104C3121079A7F8F2EE99304476EE3A159D680E818291C64147739E419DDF3C62FAAB38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ed2867d6755d5a303fae44325ee3b9c152ae360ee18e91e082dde88b6f79d1c0
MD5 d5e418ade14e5421f9a41af8027b6708
SHA1 cd666f259ed898b100ad884b27acc374969e02d5
SHA512 d83e2021934f57fb00b4d2ad8b783e5c8fa135f5315b999754228b7a7e865e94e213c76aaca46557c171181711e73a01c87ce9390efb3647c3d3973ce785ad52
SSDEEP 3072:SmMCFUaUUiXm1rSkh5fM/tI3ZNUVe6SibUQ8FdkJ/:ACFmUi21rSm8uUVNSlzY/
TLSH
T16EC31210B9A7BCF3EE9930447ADF2A144DAC0D818291C64156739E415DEF3C66FAAF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download