6f0838ba970a0b1081d6e8ea3600775cf325c7e517455786d108c752c9d01338

Resubmissions

20/06/2026, 04:41

260620-fbkejaet9y8

20/06/2026, 04:32

20/06/2026, 04:31

20/06/2026, 04:17

20/06/2026, 04:17

20/06/2026, 04:13

Analysis

user interaction
yes
max time kernel
55s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 04:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ReShade Pro Forza Horizon 6 (2K-4K)-246-1-1780245579.rar
Size 7KB
Sample260620-ewtchac17j
SHA256 6f0838ba970a0b1081d6e8ea3600775cf325c7e517455786d108c752c9d01338
MD5 b188b652db71d243e115bfbc7ce6d353
SHA1 b879b3ecdc71640f9558899c783bd9b05ff30450
SHA512 b5a17f5a8b3a741404c58291df34e2903813fc1eb9a089d35fc2c2b1d3ef883907709183a5ffe2f251312c32e4794c2c1f9195c9a8f955afddc5ff6c944d3e90
SSDEEP 192:DmDXwhUL6AJAOqWdsS4iXyATlygKeUdE5bQvF:SsS6WAyd4+yATAgbSF
TLSH
T193E18E6866CA4A21CBBD032AB385972829550BBBE3DF6CB4446712564B51E20C7C2FE3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1216	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264027070808734"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{B705F2EC-AC94-447F-9C3D-8C4EA54377BD}	chrome.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4836	7zFM.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
668	Process not Found
668	Process not Found
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	4836	7zFM.exe
Token: 35	4836	7zFM.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe
Token: SeShutdownPrivilege	2340	chrome.exe
Token: SeCreatePagefilePrivilege	2340	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4836	7zFM.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe
2340	chrome.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 432	2340	chrome.exe	97
PID 2340 wrote to memory of 3732	2340	chrome.exe	99
PID 2340 wrote to memory of 3732	2340	chrome.exe	99
PID 2340 wrote to memory of 1216	2340	chrome.exe	100
PID 2340 wrote to memory of 676	2340	chrome.exe	101
PID 2340 wrote to memory of 676	2340	chrome.exe	101
PID 2340 wrote to memory of 2948	2340	chrome.exe	103
PID 2340 wrote to memory of 2948	2340	chrome.exe	103
PID 2340 wrote to memory of 3052	2340	chrome.exe	104
PID 2340 wrote to memory of 3052	2340	chrome.exe	104
PID 2340 wrote to memory of 536	2340	chrome.exe	105
PID 2340 wrote to memory of 536	2340	chrome.exe	105
PID 2340 wrote to memory of 2944	2340	chrome.exe	107
PID 2340 wrote to memory of 2944	2340	chrome.exe	107
PID 2340 wrote to memory of 3312	2340	chrome.exe	112
PID 2340 wrote to memory of 5164	2340	chrome.exe	115
PID 2340 wrote to memory of 5164	2340	chrome.exe	115
PID 2340 wrote to memory of 5448	2340	chrome.exe	119
PID 2340 wrote to memory of 5448	2340	chrome.exe	119
PID 2340 wrote to memory of 5628	2340	chrome.exe	120
PID 2340 wrote to memory of 5628	2340	chrome.exe	120
PID 2340 wrote to memory of 5900	2340	chrome.exe	121
PID 2340 wrote to memory of 5900	2340	chrome.exe	121
PID 2340 wrote to memory of 5968	2340	chrome.exe	122
PID 2340 wrote to memory of 4552	2340	chrome.exe	123
PID 2340 wrote to memory of 4552	2340	chrome.exe	123
PID 2340 wrote to memory of 1616	2340	chrome.exe	127
PID 2340 wrote to memory of 4148	2340	chrome.exe	128
PID 2340 wrote to memory of 1172	2340	chrome.exe	129
PID 2340 wrote to memory of 1380	2340	chrome.exe	130
PID 2340 wrote to memory of 1380	2340	chrome.exe	130
PID 2340 wrote to memory of 5388	2340	chrome.exe	131
PID 2340 wrote to memory of 5388	2340	chrome.exe	131
PID 2340 wrote to memory of 5416	2340	chrome.exe	132
PID 2340 wrote to memory of 5416	2340	chrome.exe	132
PID 2340 wrote to memory of 5596	2340	chrome.exe	134
PID 2340 wrote to memory of 5596	2340	chrome.exe	134

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ReShade Pro Forza Horizon 6 (2K-4K)-246-1-1780245579.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4836

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff4c40c728,0x7fff4c40c734,0x7fff4c40c740
  2⤵
  PID:432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,9834351700830114800,15186679451978663421,262144 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:3732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,18011924987823216198,12737927810132330470,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,2081201566854119085,9623613416854060474,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3284,i,5181289450320158089,16962199402293379987,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3432,i,7795971911432223299,2996388572741072944,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4448,i,12890160070534732200,4786776256984365326,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:2
  2⤵
  PID:536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4812,i,12018615555637838438,8358806847949927422,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,7467001615169694344,3229856659597947319,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=6048,i,4376037748449010302,16035742994634343999,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4712,i,17140377911548271301,3131145674536724951,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3436,i,4733483578044387085,6998038718611303226,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3604,i,14239209651054879762,16749954269297463170,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3560,i,13143307509596547407,14457749085931670099,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4836,i,6038751972974943121,18420593224452985133,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6484,i,16643586365375743980,605501794363292764,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:8
  2⤵
  PID:1616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6500,i,12888556034058288156,3748412124270971457,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6572 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6516,i,17059309427212025128,8740625814337883673,524288 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6528 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6608,i,14522465750518931833,1722411828504541487,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4432,i,15044259786311018053,4801449434960732049,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4456 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6704,i,12096808933512291,6019734528122842769,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7080,i,18098325384860236034,17151803189686651898,2097152 --field-trial-handle=2000,i,3235250410725764521,11545717924972694784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:5596

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3224

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 abc45a0517855908f55cb25728043ddb8136b8a6f8d9e4f33420ff75352d72b4
MD5 d088304425529e30125ec956ce33ef96
SHA1 7bb0206f2177dd410545a7975fc71896fa653abd
SHA512 225108522a586c17d678e60e0cbf339f2e3525d9e610b9eb5292f320cef6ad9c967640269c56556c7918b517c37725df7db8edf1432dc1b5f33c75aa5e20b28d
TLSH
T151E0ABAACC21FC2B5CFC4B2E10904B05DA2013172B60890B373C8208CFB16B702C185C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Size 57KB
SHA256 82eee581db923396043ba6a9589b5ca5010c30411defcc6ad6823e67826f2819
MD5 7c0fa63c7dd44dece9510ef7654c5edd
SHA1 68e6192afd5c0e23877e1a217327335ba2b695f1
SHA512 653f2a3c097dd19d8ddc2cc427f1f81752babb2b1171e1a25d2526a5338d7974f440967f57381b0ef81f6e0e4e1284396899a171bf9a5e1135c470a3fa1b5d77
SSDEEP 1536:dQp7BZvHdSe5xD7zMUKAEIIcZmaafUqdrRNY4uVuwHWXnkm:qtlce3gpIhafUA+V27
TLSH
T149431266C7EFA5A0D68C5A3B30168D384FA4130ECA7799C925F3F0728F19D8DF4569A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 649KB
SHA256 1778393234263f12769b36d3b0923ac82d561cb34497438ab37e456faba746a7
MD5 b4d0e2229b571dbfc99e08c93e8a6572
SHA1 0214d4f623954e06f722cb365f9a27e87db1bec9
SHA512 88452bb838289747ada7878efd6414bcb3cb30e30c4562c97dd6aaab620eddc4eec3988884cb6842e9c3697c6e44f780f4ba7e90940cf6faea002825532c6b45
SSDEEP 12288:NMfX9XpGc2+pC0tL/rhn+GL/Zp2PqJpa2pcjTI003IXla9Va:afZIxJK/rHjZpgaXplmz
TLSH
T15EE4231ECF050D3D4AEC639F520A1176BAA23398CB0C395B6D591ECBA75C9CF60DA712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 22KB
SHA256 6a9d62658c3f167e75dfcb11e359c39d3230356af8d22bb751990b79f69326b5
MD5 195d6225696cd3d76e7f6561b8b1c169
SHA1 77a953346e5994594181bc2fe7dbd46783f70fcb
SHA512 7f6b79e309d439369a8b4a1f0c42cc60654bb4ad225c9dba1aefd9aad50789de6495c8a286c721179ec6baee6d74d974d9d3aaa7c391c52995e1cf8fac3f7a0e
SSDEEP 384:Eh/QdK7Z1DP+dh5Whwix3cUhgPOibBe1cxvW9s2riYExUzdWsL7F7nd20EuNTbO:pdy1P+dhWxx3JqPVzs9sGsxUzck1TTbO
TLSH
T19EB2E1C0C9149F65D9470B6A8E3F579C03AF273BD5A9C80EB5F4AA7584F0120958D3C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
Size 34KB
SHA256 d8f394d370496b9b33c11c71a4839522594bc33a9d5da5ca6ee56403f5d1dcbd
MD5 e67a7d60235637f1d1a93c162d73aac4
SHA1 281627a210890d22ced84b4c5616b33b579debb5
SHA512 d9518c0c1be8172cb89ca7801936ba3dfce6a9d6ef6b22e2dcd8693a2f48c676ec0faaa3b9ce60ee73f54f1bdb520af8f381fd85daff8ee28c7e52899775a6cb
SSDEEP 768:KfTYvh/9zPSM5FoPtd3um575MFG+V0bdRPpIocsTqfqH:Kf8vhBNzOIMKo+cRPWocBfqH
TLSH
T11CF2F112B6CB26699535AF222791B3858D180782EDC3B521EC040774BBD7739ECC9EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 282KB
SHA256 06f357dae49e6d81668e583539072c000a9db4a7243197f08ec5e7f791692a06
MD5 83b697d6a7b80f0dc6a2e25a4031827b
SHA1 486f2daaf20f91534c78981d8ce070108c60adaf
SHA512 6a29dd7b807d1ae2d65f7674ee9f150b25f1ae744b9cf787c50e6893e3abaa1ce660f55e95fea2f947a7b3cf73d9a8832178b8213750148c553585313177dae8
SSDEEP 3072:7ZZ+kBrOyo7E57OF6bS25sTVti/NS2eS2x75M50XxNU73AXjVW9EWXIgU7OyhCsl:ROHEhuCGaMF
TLSH
T110542A1922D5B2E5D02E833315518D07E375EEC856CC705AE8A17A2C6BFBF483A14B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 16KB
SHA256 faea7c471310f6455ab5a6101d35a8d248589c0093acb2b7bbf2d210ab211488
MD5 762704a6a046b610413aedf707a58510
SHA1 2dcde6cad5268d23ae2bd8b8f3628f6f0a5deb9f
SHA512 e6a38c356f862178c24b88cb1d1e8604d2a17184f1d95861fc3993e5a15db59ad55a6fe2084a19e774b7be05f241be4d60dc31bf7a49e86b7ecd8923fec1ade9
SSDEEP 384:Ag7nlOOGUXeZgL8GVzZNlKbRpWytTDEbFEJeqeI3DiiBcZ0:tOwBLr17KbPWUTDcFEJehEBcZ0
TLSH
T19E72AF763FD8848BC5B6F332A4FC0349A916AC0B2251D1DC5383316C1967AEB386DF56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000015.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000015.log
Size 234KB
SHA256 d23e9e7e91a2e6f405dd133662d2fced4bea3b868f5cc9627c9852d159b2782a
MD5 568e7692967c0289d4b663d898a27d68
SHA1 2c2cf0067bc5e8849f4c9bef469b3df0ea500cbe
SHA512 a6b03cdee396354de5e3e53f51baae6706dbdb22122143fec0356bf79cdc4d9d9ed4df78abf66a21a9348a5eacf09ee07f67f21d986572fc47a4f19adb4d3067
SSDEEP 3072:InIGA3D3Dbnm63wZCCXR25O4juzTKhg8GcUnP9fnokIGK1IS:5
TLSH
T10D34B628B055E3C6F13DC377053B1D26E635A4C8C95674EEB4917A0E26B6F8A3E2076C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000017.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
Size 20KB
SHA256 5ed9b2f16c9f9fc6ad9d05a059d5af968640f6cf4fccaf17ee4fec2b69e55f32
MD5 f9b9bf3a15f6a2da5d6ca58c2802011a
SHA1 228ef3434024d0bcee2769ed31b02305dac628b7
SHA512 5f32ba609ae9313be910334e40565a3fe333ac60745a528a306e795cc8a9b39c91ef3e9cd3825cb02b73005f31e7810885d8f4ee9accba08f3dc304cf843f56a
SSDEEP 384:qbv0gZNkSgC7SYoRp9kBAjRYTmQ25RoVzZNlKbRpWytTyEbFEJeqeI3DiiBkdJ:ov0c+JRI2jRFQ2Tc17KbPWUTycFEJehr
TLSH
T1A392AF256AD1D7CBD264B63064FE55C48B3F39072357F4CBA383112C8D62AC72B29B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 6KB
SHA256 645ae156fea49e2f573760746b7b85066e38e34d22b30a652de2f00871c57095
MD5 3955a28c1544227aee560c5a7ec0d4c3
SHA1 aee10f59590e094beb26b84835b1aeaaf1e6fbd9
SHA512 e2a529764b0ddb848ebdc61a2073a2917ed08634e0d103316d5945de7a54c72695f0513ab1459f482d98064e6c2236f48e834be448b90e2536b534b1f70cf4ac
SSDEEP 96:W/JCr+/JBSYjh7SiGKqcc2Z5XhaX9a0g4ajOvvTv0:frbORzq+2XcjOT0
TLSH
T165D1CFFBAA0DD9AD4283C026CD38F161DE6CD009975E2F08A6CD668F07D0527C39B1B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old
Size 351B
SHA256 6cede07e20bac4123d00deb76855ac9eb3cb9c62a50d7eb6030f847fb72b07db
MD5 a8c1f585bd52764f96211b052cfc9dc9
SHA1 f46c0b894e99923f9688f319812e785d71cd0c69
SHA512 0979e8c3f3340f002ec3e6140fe05c7ad7b1dcc7bd7c3e989384c056d26d41a013b81de7616c9213af710fd3d25921a249d1fbf930b5c145892e9552da18093a
TLSH
T18FE0D82998C9D65F625480AB6920770EEAA6550D97DDAC860F41D80970CA41890A9251
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 1KB
SHA256 abd6de577c4b963213e0673238a44dab99504367d8233a3c57edac78847b61fa
MD5 0c3bdd1eced6e1bc3ac3a47f1294d716
SHA1 631d449b8d49273afc7b9be52347cfd8914d0187
SHA512 869e1a9a7c2953386a5184e73f44b9548bdf2256393175c5daebb5692d0a76b37a12c1fd88842066b9be93fe702e0de2dae8814ab25eb70e73c7bc9ab5c9e805
TLSH
T11C216A50FBD82841FDB801F61C3B6D2D7F1A74CE012AD51F1459326BA4B7A4A5C7092D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 93d0a6b8b9c2c4039c96879411d4bd20dfcb434719885c212263cdfc7e1a1438
MD5 34d27e04141cef5f59385697a2ab4358
SHA1 c35c691bbab9d36e514ff96e94d91f9e5fdeee9c
SHA512 0b9ffa0abd59eca3fdfee178c21cb974c9bfe484e1e020e70348b4b2be33154c23ae023ccc60b91a15c68357bd8f9c7c1f308454e38cf59daa3fcc448951f071
TLSH
T1D0417CB3C7E8867D890156F4BB152E1FCE290E24536C3D5AC8D4AF1F67E28B5D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5f958a6a7f3dec25b173dcead5694924c3f296eb537e851e3972db614b8589bd
MD5 52104cb364b76cbb02acd08ba3a668f4
SHA1 0b3110df8169300f159845ee95fb4e8343b811c1
SHA512 c255b382ddb71db120a15088a1997e874bf99dfb7e345fad426f928dee5b2dbd531c026cd69fc186e7adb9c2ee9a47bf5255fba7989132ebc9024ef30f2d081d
TLSH
T102417CB3C7E8867D890156F4B7152E1FCE290E24536C3D5AC8D4AF1F67E28B5D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 008d8edea16abae4b2aad414fc25ad389ffc801baa778b8fa64008da12f996fa
MD5 31521572eae9203bb8a17add41b23572
SHA1 fc8f98cfd31ce74034236c459443be4a18171a65
SHA512 f7dbd4508aec833f85e429d742410f6fc77d1ae0bc645331483a472597020df4b20f97b6bb1782dbc1850f6ea4894cb173ffc0acefcdb16fe8a5f37d21b3f5c4
SSDEEP 192:VRFWoMP3FjB08uEBv7AhAPRp2l9qHsb+WNnbb0T+CkwtCSrVyIsnAUgtaJ:VRFWlZBrRk8Xmkw/06Cft8
TLSH
T1E942C73EEE10697B9CDBD219F9957B27D7F5202531902E84E6FC8A2C19E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 8af3537627d5b77fcde8c5fec3ead884b4f35826b3f0b29cc80ccb6f7106f108
MD5 6ee3ee57083bfc40a83a5a88c934fce9
SHA1 40b318a603924f6bf8c7989d2881ce45baaa6d13
SHA512 ffc40901631610410af2207720fb58674d184cb8538bfc980d878fb73fbae0a1a9ea30b5a1c3ce44417913b3b4e5a8c5b923804a0e8b7cd873b1b874828eeb4d
SSDEEP 192:VRFWoMP3FjB08uEBv7kohAPRp2NYVAEA9qHsb+WNnbbi4U2w+CkwtCSrVyIsnAU/:VRFWlZBrRoo8X5Akw/G2rCft8
TLSH
T18752B53BEE10697B9CDBD219F9957727E7F1202535902E84E6FC8A2C19E79CC221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 8267c0c25b6b5d5ba45750cd5801d53f9cba7aab4a83000694d8d9f3a36542cf
MD5 e2a08148d376b9231ab299369ac37539
SHA1 2236e1fb56c2aafc37d330e5c61fc2c018cc29fe
SHA512 6632d39aec5bd4f93e350e74b9045daa76f682a3f7eb6aaa49f520900393641ad6928c22430a8b553e69c33a349331596adb759c1b9999bcd5a1df8a9586063c
SSDEEP 192:VRFWoMP3FjB08uELxv7kohAPRp2FaYV0CIKA9qHsb+WNYEbbiF5eS+CkwtCSkVyr:VRFWlZBrLhoo8XS8kwN+eVCfge
TLSH
T11C62A43BED10397BACDAD269F9557727E7F1202525D01E84A6FC8A2C19E7ADC221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\70a50a2b-29b6-41c4-8b1d-56ef6698de38\index-dir\the-real-index
Size 2KB
SHA256 5177e2c8605a7c1bef471b97e59dc883c0b64fc2c9484cf4da11ced497003dad
MD5 4c05d115dd2bf998a84cb87bc8c1085a
SHA1 04dccec545e2e5078dbca0488dcbb5ae8e98d46d
SHA512 3aefaa7aaec1941ef4ff77544784941194039bbfcee1529d78645ff7c30dd699c269ce2756b8980ba310b05b285982c068fa45d01b1a109000f14f795e12bd9d
TLSH
T1B441660CCC90ABADDCB451FE1D9415F657752D38FC59C2A34194B6B13403AA41B479FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591c58.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\70a50a2b-29b6-41c4-8b1d-56ef6698de38\index-dir\the-real-index~RFe591c58.TMP
Size 48B
SHA256 4ba2774ed57f199f86f20bf57d1b595f7482e1c248263697e93bb617c2a2ff01
MD5 66f80f105fa328712ac7a1426f55cb8e
SHA1 414c36e4e7e741bb3b05dfffaeb1916d4477c13f
SHA512 721da638573af88ae4685d8dab4fa85fad6abd25b631d3f553628a25d6b6b05cfe2e32df3ff5f4238aca1497ba92cc2720fb7a71f9e3adc98e02fc3a027f5c32
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d6e2eb3a-0260-435d-a5af-5d52d5c12c0b\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d6e2eb3a-0260-435d-a5af-5d52d5c12c0b\index-dir\the-real-index
Size 576B
SHA256 d952fbd035c7017b6436ee534329b84720a2b514d85db0fd93c65e4d31ea85f1
MD5 ff2465058b8fa316f53d0c97daef86de
SHA1 3b36505f606e4e7ef15b54d75575e0904e185344
SHA512 d6af9c293fa23d7234853ee6014a056f1a7d93662c6dbf98b44fe189eeb926588c75b45a7ee7e7929978a9fa0eaf19246a9783c12a6b1ec824ef4f4cf92382c0
TLSH
T1D7F0F153BA65886FEC0E58751167897A2374844C39CC57336469B19B3D6F3734C83AA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597d44.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\d6e2eb3a-0260-435d-a5af-5d52d5c12c0b\index-dir\the-real-index~RFe597d44.TMP
Size 48B
SHA256 f4ff43331cf09b18627ad83017d22f89340a7e4bee7590c9786f893a78fb92b2
MD5 f7180d8399db318a827bf647f050234e
SHA1 26f58788ec2abaab3741ce0f893398bf26ed7772
SHA512 7dd0c13cfea7e8691f28c24c8c8ae56fbd83a9c949770bc9bf5bd1fa4dd2f2f2aed9f84fc110a30b4c4340edc4c45a38af9b9381844987d92d79e9b9c382318e
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 20ef3fc27fa7f381a8edfb767d17d320ff24533165263c4f7d7dacf2f8a5f667
MD5 158e4736df7c1743b3afbc3f0462af4e
SHA1 6ab35f14ce5548d9ce6bac84d79ba60f07c89edb
SHA512 74c2774b16caaa2e1b8508980d052100a7ccbab463b0cc7200e254389563d45163c4132ca1079fad45f5c8735b48e49d9116cc758e47c99597e8480b3fa6b579
TLSH
T152C04CDB0461455A0A74ABC83038532E922A57488485C8E5E55668463034B138812625
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 9c152e6a8cbe1bed848cff1d306249d5294329228e080743b28f87311ee069fd
MD5 88b54385e80b6a9d69ded8af76984cc5
SHA1 7071d05bcb8789d52a25eeaf373d3df2e382e8f2
SHA512 fb3edea77d0f2b546ab09a4c1ab1701c520ce0862e635d34b37193e3bc27cb24e4ab5608d91d5705a8d9223a53d407528b8de07c1664aac08ebe344baaf3736e
TLSH
T1C8C09BD70861459A0B70ABCC343C772E922F5748C5C5CCF5F95668473278B13C81673A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 9c59fc6af1bc20d36cfdc33eed0596562b63dded0c7baa298ce3f3a770a114b6
MD5 2e1a75a6d42906cff78f58feddf79d01
SHA1 989af9d2d08a548e7ba669c287d0d6c26715962f
SHA512 102daedbd8e58ce3faa13cc4e6cca307ba9d0dac98dd949113e80ae2f43306291094e5490547f3a292927abda753ad5dfd463dd4c44047d8e2edeb3c75ea0382
TLSH
T1F2D0A7872962409617745FFC343C767D431BAE48CDC2CCA9A55674053274B23C43AA3D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 390B
SHA256 3b9a26b20d81d4f55f0d0ace9bfc16573cecfc364072dcab3d51a93dd4f43141
MD5 da2aed75baad08138bdda30666ea94b1
SHA1 3e6ae6e149c106bcd60ae92db6195a58bb4ed8f7
SHA512 d5a8cfd78829407b1182c4fe7e786eca06681c792ef606ed507b11c92019b7f5495f1633d07d2a4df0b8ab11791511646180e08c70395108fa560af73246c073
TLSH
T13FE06146667204499B728FF5353AB2AF833D79048D41CC6465C7341932B1F0BD426D79
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 b0fb7fd8484a9b27f9b59d50a08b382776effcec042a44f0663632e7fa67292a
MD5 eb9d9b7ef965df5e4977c3b69140e107
SHA1 3d82c6612fb1cf892dceeb1f6e178d8f37d10b11
SHA512 6f56af04ebf56fad55aca8b9b96b7bd6ca43d1f8d42a41ffe16f991bfd5afcadd2452ce9005597064002e778cec04200a96ea951bc1ca3a46d11da975e1ef13a
TLSH
T1F0D023C785714656177097C43038125F41399F05DAC6CCE6DC077497317C703C42A736
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 2bc4287deeb8aaf9baf28acbb13ff2a33adad0315292d479b2734502937b2a90
MD5 57c0e72692bdf7233e7030da82c42932
SHA1 99605adc66e865c3864c55aacb386068865db60d
SHA512 853cba97c8c466772c8096f4d9bd33c25e517b03ed61bcdf7cabbc585aac06eb4d972f2b17038a3fa6277399912c2a4bd8a2b254f4f920f6cf5845199b185e80
TLSH
T1B7D022DF8032CA6A2B30EBC4703803AE822A6F08C88DC8E5E807B8423078703C403735
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe590eac.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe590eac.TMP
Size 137B
SHA256 c5462e607a2de69e70ba67a9318d97b923a85c3479620ca5b1dfdc580d3d0542
MD5 4b5bb1bcc74bfe1daa9067955e5de410
SHA1 503dd236263cc10f63f178a7b3c262cfe5de50c3
SHA512 b299ff0715f9b13661efc08c13e9dc47b3e55712c0240634c019b13eb1819ed5b0049fdb47ccd5925d366a9b943993db4b3df71479ee0af2c95f47b1e1865b6c
TLSH
T1AAC04C971462455A0B706AC57038575D922A9E588885C8E5E55778467034B13C816625
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 30584185ef2f1ddc10de6a6c1b4c363713672231eab2039d405a7d743b33e325
MD5 4bce666ffbbedd19b5c74a933426a995
SHA1 1fba0934cb10e7cf5d6a752d5cdf88176a18f976
SHA512 455d85b4018153ec4a981b258c4ed781b0456f9b7289369f03ead8d088c08fe5bb35e0ce2731e2e6b73d5dbe0bf4afab85a2f0f94c64b2b5377fd82ef202664c
TLSH
T103C02B008840D221C01505F0055160CC3254DFF0CA0D170012A43D5B7C371329146210
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597611.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597611.TMP
Size 96B
SHA256 3e102fd3c1413246d0676f970e3c45cde30bb336287aea385fdb928356d4ee68
MD5 a148946ec95b7544727254626f4efa5b
SHA1 319ad320cf8d51fe5b8e0a85302248dd3292aba4
SHA512 52e45a4fb679449ddd090b5044aa52eb786b8898dac300673f5364175215ff1956ee49400546474c513d29025f113becb0646bfdf8c731645bd07671941bd374
TLSH
T120B02208C0022302C08303F03CA8C0C8B030CFA0C20B030A82F08A22CC2222000320B0
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2340_108284218\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2340_108284218\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2340_108284218\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2340_697563082\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 91fe53e72fbcdcc8cf90d8712f67ac90d1a7552347581c9b2e0b134028b39ad9
MD5 0fe41b62299417596b08ce8c31fc22ad
SHA1 a3cb3fef89aed40dbf2a0ea19d5685498658b83a
SHA512 85cad258b4c9db57952b0daae1b82a00f809e89dfa5fce0dea6ad23d30f999fde44b504fccbdc02734a90075fcbc3744a75b972b01d5674621dc114802bb4c37
SSDEEP 6144:upsLiqC6IPHXi0X6vK+12m7Rkm1tYpBeh2BAoY:upsNC6cHy0IFB9oBGcAoY
TLSH
T190341227AD75DEFB15E4E719B08E0B1F0CF548A3D470D997C8E66F00639AA86014EE78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 ea133c678d79e665207b36e0d243cb1030458166633675f5737e56ae9f3cad0f
MD5 6ae0e70af937a442350b0a9240aa6287
SHA1 af333f9da4e262ffebf9592acefde9d32a4f44ae
SHA512 5f63cfc3eb6eb766eafe141b36a0e0fd140e3cbcfb8cd965345c47e041bd737dcadd6d8a1029964e585d275c8f1277fbdd8c8c6a0ddf463fa8a881c5af8eaa4a
SSDEEP 6144:epsLiqC6IPHXi0X6vK+12m7Rkm1tYpBeh2BAoY:epsNC6cHy0IFB9oBGcAoY
TLSH
T1E2341227AD65DEFB15E4E719B08E0B1F0CF548A3D470D997C8E56F00639AA8A014EE78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 795700c3c21e0315590a9ae9b3c5b8b664a0d19456c24a6172c3fe0299338a56
MD5 b42052b9508b8267b0c993af44918257
SHA1 8ebfd62c766faf5d8c7260458e62bfaf4a969dab
SHA512 70190de2ba7d83e2bad92bb893b6bb5d7069370a575c56020ebb3b8c83618f5a4a0378342d64b2f932a7890ed6c68dfae184ec5894feecfaba9aae888bf4a135
SSDEEP 3072:AUGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:Ym7Rkm1tYpBeh2BAog
TLSH
T140C3023B5D75EC3B5CB5A74EB08E0B1E2EF149A6C930DE9288D85A0437F97CD0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download