hxxp://links[.]notifications[.]fileforms[.]com/ls/click?upn=u001[.]FllkJtf8wKSGa6RAZAEOBFvI5Z6lSQIqSPeNP-2BdyjGbgrkqN-2BpvxXjfU6znUkFpCwkE-2FsdNn2sN7Spa7miKIYmAk1dRZeKHXuBPrLjQRjjWG8uE4XY8gW5BtMhdeg-2BAZOV1IWOHLHHPUy1cB7C2VhytSa3RYK6G1asc8zzogcWG-2FRVRsL7q-2BAH-2B5eS-2BhMCBhQsMb0yYeTw2l-2B3ZNriqoBfV5JDxLcLKFSHDsRBRLx25fg7Y-2FER3eD9KBVy4egAdFz4P8MZ29CFNbIq9dVNBPNU6OnbELHa0JxbT-2FhBGWE3ghIDw0LNEgshfuwDV4I3hQLMWSeTxp-2FqYHaE1WpJNyr3O4efL3eESySUuweBUrGJKBfucoGyCU-2BrVEfXeFe6DrNin2rdWNGqpoNcp0HLwuZV3OC1IC1XuyJ7AMc4SLKaOqdN6nj6eKGPyiDhdslw42SBDmg-2BqkePhYLKImqCnR2Qp2Kr-2Ft5xZMWgtmCPKdpwcTzD1JSz0-2Bg-2B-2Fo09MkvTj51A60P-2BxIupVYr7tsuyGLr8-2BaD8WIxkQRsH0lefqZEjY-3DOTiH_NSg3tvTOBDqXx-2BFoA4j4y-2BxyzryeGuxZ7halBpRHsjP-2FLyfKPX5qmSTznFSPXc2qq1KG7K7Ki3iXyWqek9g3gllFQx3r4UhJFkRlxlpjPSCJrfsu3FXeCMCD34j5zCQatL7fr2dnILdmmAMp7afQrM0DzcuTRfWAHjoEBxKm6C4HFNk7pWt1EDNCtKlZBy1pSgBclpkUgGMrAIQXyLIp2ddVavS-2F9hjPEhzVDK5fC5vlhZGLRU4BV7IUFTygxg6sD5BVMFEoAFa25YVXXH5J-2BefVSd-2B5LfQBy-2BK5Vs4Bqak-3D

Analysis

max time kernel
299s
max time network
301s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/06/2026, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://links.notifications.fileforms.com/ls/click?upn=u001.FllkJtf8wKSGa6RAZAEOBFvI5Z6lSQIqSPeNP-2BdyjGbgrkqN-2BpvxXjfU6znUkFpCwkE-2FsdNn2sN7Spa7miKIYmAk1dRZeKHXuBPrLjQRjjWG8uE4XY8gW5BtMhdeg-2BAZOV1IWOHLHHPUy1cB7C2VhytSa3RYK6G1asc8zzogcWG-2FRVRsL7q-2BAH-2B5eS-2BhMCBhQsMb0yYeTw2l-2B3ZNriqoBfV5JDxLcLKFSHDsRBRLx25fg7Y-2FER3eD9KBVy4egAdFz4P8MZ29CFNbIq9dVNBPNU6OnbELHa0JxbT-2FhBGWE3ghIDw0LNEgshfuwDV4I3hQLMWSeTxp-2FqYHaE1WpJNyr3O4efL3eESySUuweBUrGJKBfucoGyCU-2BrVEfXeFe6DrNin2rdWNGqpoNcp0HLwuZV3OC1IC1XuyJ7AMc4SLKaOqdN6nj6eKGPyiDhdslw42SBDmg-2BqkePhYLKImqCnR2Qp2Kr-2Ft5xZMWgtmCPKdpwcTzD1JSz0-2Bg-2B-2Fo09MkvTj51A60P-2BxIupVYr7tsuyGLr8-2BaD8WIxkQRsH0lefqZEjY-3DOTiH_NSg3tvTOBDqXx-2BFoA4j4y-2BxyzryeGuxZ7halBpRHsjP-2FLyfKPX5qmSTznFSPXc2qq1KG7K7Ki3iXyWqek9g3gllFQx3r4UhJFkRlxlpjPSCJrfsu3FXeCMCD34j5zCQatL7fr2dnILdmmAMp7afQrM0DzcuTRfWAHjoEBxKm6C4HFNk7pWt1EDNCtKlZBy1pSgBclpkUgGMrAIQXyLIp2ddVavS-2F9hjPEhzVDK5fC5vlhZGLRU4BV7IUFTygxg6sD5BVMFEoAFa25YVXXH5J-2BefVSd-2B5LfQBy-2BK5Vs4Bqak-3D
Sample260622-psep2sct4x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2568	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266053211059196"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
112	chrome.exe
112	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe
Token: SeShutdownPrivilege	2860	chrome.exe
Token: SeCreatePagefilePrivilege	2860	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe
2860	chrome.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 2860 wrote to memory of 2096	2860	chrome.exe	85
PID 2860 wrote to memory of 2568	2860	chrome.exe	87
PID 2860 wrote to memory of 2900	2860	chrome.exe	88
PID 2860 wrote to memory of 2900	2860	chrome.exe	88
PID 2860 wrote to memory of 1872	2860	chrome.exe	89
PID 2860 wrote to memory of 1872	2860	chrome.exe	89
PID 2860 wrote to memory of 5616	2860	chrome.exe	91
PID 2860 wrote to memory of 1836	2860	chrome.exe	92
PID 2860 wrote to memory of 5616	2860	chrome.exe	91
PID 2860 wrote to memory of 1836	2860	chrome.exe	92
PID 2860 wrote to memory of 5580	2860	chrome.exe	93
PID 2860 wrote to memory of 5580	2860	chrome.exe	93
PID 2860 wrote to memory of 4428	2860	chrome.exe	96
PID 2860 wrote to memory of 3808	2860	chrome.exe	102
PID 2860 wrote to memory of 3808	2860	chrome.exe	102
PID 2860 wrote to memory of 4952	2860	chrome.exe	106
PID 2860 wrote to memory of 6108	2860	chrome.exe	107
PID 2860 wrote to memory of 2324	2860	chrome.exe	108
PID 2860 wrote to memory of 3500	2860	chrome.exe	109
PID 2860 wrote to memory of 3500	2860	chrome.exe	109
PID 2860 wrote to memory of 3420	2860	chrome.exe	110
PID 2860 wrote to memory of 3420	2860	chrome.exe	110
PID 2860 wrote to memory of 4336	2860	chrome.exe	114
PID 2860 wrote to memory of 4336	2860	chrome.exe	114
PID 2860 wrote to memory of 4560	2860	chrome.exe	115
PID 2860 wrote to memory of 4560	2860	chrome.exe	115
PID 2860 wrote to memory of 4528	2860	chrome.exe	116
PID 2860 wrote to memory of 4528	2860	chrome.exe	116
PID 2860 wrote to memory of 112	2860	chrome.exe	119
PID 2860 wrote to memory of 3824	2860	chrome.exe	120
PID 2860 wrote to memory of 3824	2860	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://links.notifications.fileforms.com/ls/click?upn=u001.FllkJtf8wKSGa6RAZAEOBFvI5Z6lSQIqSPeNP-2BdyjGbgrkqN-2BpvxXjfU6znUkFpCwkE-2FsdNn2sN7Spa7miKIYmAk1dRZeKHXuBPrLjQRjjWG8uE4XY8gW5BtMhdeg-2BAZOV1IWOHLHHPUy1cB7C2VhytSa3RYK6G1asc8zzogcWG-2FRVRsL7q-2BAH-2B5eS-2BhMCBhQsMb0yYeTw2l-2B3ZNriqoBfV5JDxLcLKFSHDsRBRLx25fg7Y-2FER3eD9KBVy4egAdFz4P8MZ29CFNbIq9dVNBPNU6OnbELHa0JxbT-2FhBGWE3ghIDw0LNEgshfuwDV4I3hQLMWSeTxp-2FqYHaE1WpJNyr3O4efL3eESySUuweBUrGJKBfucoGyCU-2BrVEfXeFe6DrNin2rdWNGqpoNcp0HLwuZV3OC1IC1XuyJ7AMc4SLKaOqdN6nj6eKGPyiDhdslw42SBDmg-2BqkePhYLKImqCnR2Qp2Kr-2Ft5xZMWgtmCPKdpwcTzD1JSz0-2Bg-2B-2Fo09MkvTj51A60P-2BxIupVYr7tsuyGLr8-2BaD8WIxkQRsH0lefqZEjY-3DOTiH_NSg3tvTOBDqXx-2BFoA4j4y-2BxyzryeGuxZ7halBpRHsjP-2FLyfKPX5qmSTznFSPXc2qq1KG7K7Ki3iXyWqek9g3gllFQx3r4UhJFkRlxlpjPSCJrfsu3FXeCMCD34j5zCQatL7fr2dnILdmmAMp7afQrM0DzcuTRfWAHjoEBxKm6C4HFNk7pWt1EDNCtKlZBy1pSgBclpkUgGMrAIQXyLIp2ddVavS-2F9hjPEhzVDK5fC5vlhZGLRU4BV7IUFTygxg6sD5BVMFEoAFa25YVXXH5J-2BefVSd-2B5LfQBy-2BK5Vs4Bqak-3D
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffec4a3c728,0x7ffec4a3c734,0x7ffec4a3c740
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1964,i,9982037522545850832,10602740758971634036,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2568
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,14224327972077096920,13614424137402926526,262144 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,5809900298141257954,13264090777741682364,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3128,i,10976488014508914235,3217253159429732601,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,8487234177869089509,12755082372178007811,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4308,i,10459004397587186637,8142974317702380856,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:5580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,12158842036422209952,6767058122362145366,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5940,i,15803138023041113993,5100409243158531105,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3284,i,3403575076569652264,6767135190056481687,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3212,i,951859369489092592,805696913372036327,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3808 /prefetch:8
  2⤵
  PID:6108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,290772894464104128,5851603998504959993,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3472,i,8819948657862115456,12811517955307001453,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3804 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,12594629335601831143,180535043960665519,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3216 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6072,i,834980339704883715,16356423870351828834,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5492,i,13467810246625619197,15781434654319087029,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5680,i,8439659471379500906,10350565798394279850,2097152 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5780,i,12725206752776307642,13032218675986975180,262144 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5908,i,12220272089117047997,10623181169881001868,524288 --field-trial-handle=2068,i,6092312784863570644,9226727036819320359,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3140 /prefetch:8
  2⤵
  PID:3824

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3884

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3c60b9985b878f907d8318ddddf89f26b223a5be63c470c439826fcec39e14e8
MD5 f9272e8124bc42a041d209f3f6aef221
SHA1 e2a95eb8a2e97547ebc2762f1b8e74b0485b95ec
SHA512 a49f61230e48637335331f1a5aba160929427758f3ef708c8629a674bdb2f6ef1333c9fde4c2b4d1ceef3826eb217c423ced6fc7bb639996d4635834b9ffb0c0
TLSH
T1C5E02BABC961DC3B0DFE075C60504745E65523873B40498F3A3C96084FB563A4787C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
Size 375KB
SHA256 431a3251deb71c9c6d19db7ece22c26583f9d8fdba96fdfbb6a5b27d4214e31f
MD5 a3e719f84f525e2c6689b3f6ac73c402
SHA1 e3e93bf2c5aa88529ea3c1e524d2350245e91515
SHA512 0816380a9e625ce2e34fef598104a90a2724096b4d627bbe790c58008eeb3c50c732aa24500caa54fdc46c7f63216533adfb46d119a74aff4ed421b9f381ddbc
SSDEEP 6144:bk02i6NJqyLQCeqg5Vici0bU4rCHA9Q9lkOmEeWxF9Mh+kLNYr7tHLh:bMNJqybeqYvxCHAmXmEevbK3Bd
TLSH
T1A4842368F4BFE4A2AE8449215E5E0D746F487EB21740540AFB7DE2BB2415C493B6F203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 a3aca7cc640a882485d011f0cfc1dc0c1bb719928afb08d8675cf5da84fa7b5c
MD5 8d77aa99b159b8cbd6972280ede25864
SHA1 90d19335986eac98d5ae498324f73d721d6fb454
SHA512 d1f18d18ddda612d2c6089d6cb39b58fe5375409de4f93b5a0fdd25fa6de3119d03dd2030e390c3cfb88917aaddec9833c3da420642a3b51aa65fd51c7162fac
TLSH
T11C01FF5094A90620EB022E3E94C5A5C77FB536EAFBC35EDA09D42870F6263E5129632D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 071dfd46e7645a7b1676331ab3b6a1df9e7d25376be0d3e2fcbb5f909f03d127
MD5 94d23a140c72663136f8b5ccd9245d64
SHA1 867bf0010a1d6df673646529e48ca2695b833692
SHA512 8fe1c3b1475889327d233422ac2c24af587b8ca04ee5b8ba6274469e21ecc570d9eb30d831fb1fdb0aa1ed52fded61ede782685ab93e4f8661b6ccc6de6510b8
TLSH
T1A301F45094A80620FB122F3D94C165C33FB132AAFAC35FC608D07870F5253D51286219
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 a57b23b9f321669559d52b2a84987fb35e093ba0b9f177d733c5cb72c9ce6a6f
MD5 21d5a591fb2cb5d04441b6aefb81ebcf
SHA1 13dcab34b0653dc0c83c561fe0c113ff3d0ef953
SHA512 08904d94f9f2ddb895542ada783cfa20048b66a169aa3b597dacbaed4eab314bfff18ec62dc8d7fcd0b53a95c155e5a57f0fe91e01577f9554b13883946c6629
SSDEEP 192:DUbLRVgeSFSwUaaIEdkg/p28rOOVRV3z+q2/PdBZv3wQ8RCruDM7wpeNOemKuxWo:DUbLRVgeSFSwUaaIEdkg/p28rOOVRV3j
TLSH
T100328CFBD7E4866D9C1165F4AB14AE1BCE2C0626471C3C2588D8AF4B97E34B3F24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 6d08e2c0314398a1711e148e6d47541a0b86987c73d86e8b6acc1774c9a843b6
MD5 bf985094e83a01e7ace01983ea18fd83
SHA1 8b6988df3487f119298eaecadc3ff5b9281082b6
SHA512 f49ce87b1c94ab43396d044a867fe98dba6317c3dfb7eb8f1ec3a11fcdb7d1210e57243ed029070e015cccf4b41b4e330e0e6957ec1e0e4998171888f31a8116
SSDEEP 192:DUbLRVgeSFSwIRaaIEdkg/p28rOOVRV3z+q2/PdBZv3wQ8RCruDM7wpeNOemKuxA:DUbLRVgeSFSwIRaaIEdkg/p28rOOVRVC
TLSH
T19D428CFBD7E4866D9C1165F4AB14AE1BCE2C0626471C3C2588D8AF4BD7E24B3F24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 a1c71e5be19b8a6afe4b95f5491202ebac547c43c702fd0b22d5b6be64488253
MD5 29be71203f76f92bd93fedd7eb647722
SHA1 f0537ca5e6ac68f9d4bf34d07d203862e13dc642
SHA512 2c4448e84be9f9964fdeb7ae6c3a52d45048422501d80c96bf7d3ea55148354032bd5aef3840fb8eccea6cb74c035d6e9c70e6e12f37ee1587e5466ed7ab99a0
SSDEEP 192:DUbLRVgeSFSwUaaIEdkgibp28trOOVRV3z+q8v/Pd+BSSv3wQ8RCruDM7wpeNOeF:DUbLRVgeSFSwUaaIEdkgibp28trOOVRT
TLSH
T111329DFBD7E4866D9C1165F46B14AE1BCE2C0626471C3C2588D8AF4B97E34B3F24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5a6ed0324c809b55843ba09dc2c2a18f3eb648494f0bd92567f8690ab34f30dc
MD5 d278f48e086af7dbd697423d53f330b2
SHA1 09355cb761763b7a856a26f91c609890f5174a03
SHA512 be60f8a9813964bbc56dcba2ca8ad866be6d84dd2a7de4b02144172380dfb92c1026a7c62ffb5ad9f4e7c518a036b7b8396f4fdf9ac07c54f778b75cefcaad79
SSDEEP 192:5RqRYIjVzYv71hpAPRp2g92HVrb+WNnhOPGUckwbVVyIsnAUge:5RqRfNEBhUXDQ7cPXc3e
TLSH
T1E842E66FA910647B6DDBD22AFD623B53D7F5102132E51E80E6FC8A1C14E79CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 efe2a978a30b33488e6c31f5a58eac0afd37683c90f1e399b819d6c80063816d
MD5 81fbca14a45dd1db45aefe4f4b86364a
SHA1 e6c89e5c3cbd0dc82399c679ccf51ee925248976
SHA512 2240b306fec1c5538e4635bfb31c14916d1c8e088c795593d7479c5bc1230af19981a2d4819cecee4ad2783c6db903e52497bf5c7fa13333714e3d081da9d05c
TLSH
T114B0128090415101C08202FC155618887154EF60D70A170653ED7927A8351908138052
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587ac9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587ac9.TMP
Size 96B
SHA256 d661775f338891afa4955b92d01e924ff0ef75ff151af9917e1be8fb78a87695
MD5 df28489490eb066124eb7602ebb4f3d8
SHA1 9bbb7ec15c91443ae14efcc326ed316df02dbffc
SHA512 314c9513541b7d4ea7fb9024908f427b953bdbf41f0e61b65e1d40f724b9b0bd43dd19ee3352a6c0bab68a615c1a7b39e748e4d02a04d341cf20809b0e39fa71
TLSH
T1AEB0228AC0022222C00203B838A0C0E8B0B0CF28C2030E22C2E00E2AEC3A22000320A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 461d73eb1eaf90b884c1ddf9bc25f24232f18c3cb73a09c658dab3a18b0e6d2b
MD5 df6f624a8874e6d59ce9d23c266129e4
SHA1 214948b150e70f588eb6ab82bf4c40bcd1e985c1
SHA512 f3714285ce92b289849e1e856cdeb03aa0906940866124a46528740bd64f95af4c1d72eb6b388abdb95cbf772c5f6ffbd79fcec929ec429a3ca1c24864f8b826
SSDEEP 3072:vGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:+m7Rkm1tYpBeh2BAo3
TLSH
T19EC3023B5D75A8375DB9BB1EB08E0A1F1DF24AA6C9209E52C8D85B0433FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 295edd4b6dac35bf733df23e38c18fa689dc6a2f543d2663e96d4d0aa408b92e
MD5 8d7526b214b211882bf2621fade5050e
SHA1 b51f90d68fe7680096a51ada664e2f031e62e6d2
SHA512 aa3cbcd42cda171c7676f733dbed2b3f76473456d0f5431ead12df01f6476531715bb6cf2d36ebfcf9e5fd832eb31bef446a06ffe58c051d4041ba10db8c752f
SSDEEP 3072:NGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Em7Rkm1tYpBeh2BAo3
TLSH
T1DEC3123B5D75E8375DA9BB1EB08E0B1F1DF249A6C920DE52C8D45B0833EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3e074d5ba21ca72d6382df8593feb6e33c98e4a9d03c175a69e188507ab5afe6
MD5 6dca94e8b94141b159d09229c4be7a86
SHA1 c2d8b7e733a160b00b1fc015193400df25d32ebb
SHA512 0a641be03580e1f3471bb63281b631460e91e282be68265c79d2a559505330212218a4f91b53e32d25ef8f1f6fb8ef1e3d23b543800b4ac4a5cedbee2345004d
SSDEEP 3072:HGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:mm7Rkm1tYpBeh2BAo3
TLSH
T16FC3023B5D75A8375DB9BB1EB08E0A1F1DF24AA7C9209E52C8D85B0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 a7678e99f6c6ff4d7831dc157a495e92381902315ae7f3e788c07c342242f711
MD5 2cc5ca989952a4fd5af4bf5976c96f48
SHA1 83116587d0930e2456a2d24333ce444ffd7cdbb1
SHA512 77d08920e533f3258bce4d4eaaad7e1eb41274db634537a84e3c7aabb0e2ca59324e76f4559116deecb426c5b2681ac33ac2c7a7f02febc45e5a467cc8ad4b4f
SSDEEP 3072:jGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:am7Rkm1tYpBeh2BAo3
TLSH
T12BC312275D71E9375D79AB4EB08E0B1F1EF24AA6C930DE92C8D85B0437E97CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 fa6295e67aeeeaef21a3abd89a6da17f36e0147bd3f8ad4ac0bb8172217acba4
MD5 88454d6d2ae595a8eb1b13cbf67b166f
SHA1 04006b48749a53848baa53a11ece3a3f3afd303b
SHA512 1eab87762781f3e8eb22d841191e7ff2dad045bbfa300e8dea5d9408e1fdb96e3c77a562f287833815b9bdd371aca892e792127b67e7a342a95f99c3d0cd3728
SSDEEP 3072:8Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Pm7Rkm1tYpBeh2BAo3
TLSH
T166C3123B5DB5E8365DA9BB1EB08E0B1F1DF24AA6C920DE52C8D45B0433EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download