hxxp://www[.]property[.]com[.]au

Analysis

user interaction
yes
max time kernel
90s
max time network
90s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 06:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.property.com.au
Sample260628-hhya3sf14m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4320	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271027090386677"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe
Token: SeShutdownPrivilege	4588	chrome.exe
Token: SeCreatePagefilePrivilege	4588	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe
4588	chrome.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4588 wrote to memory of 1484	4588	chrome.exe	85
PID 4588 wrote to memory of 5004	4588	chrome.exe	86
PID 4588 wrote to memory of 5004	4588	chrome.exe	86
PID 4588 wrote to memory of 4320	4588	chrome.exe	87
PID 4588 wrote to memory of 3380	4588	chrome.exe	88
PID 4588 wrote to memory of 3380	4588	chrome.exe	88
PID 4588 wrote to memory of 808	4588	chrome.exe	90
PID 4588 wrote to memory of 3104	4588	chrome.exe	91
PID 4588 wrote to memory of 808	4588	chrome.exe	90
PID 4588 wrote to memory of 3104	4588	chrome.exe	91
PID 4588 wrote to memory of 3040	4588	chrome.exe	92
PID 4588 wrote to memory of 3040	4588	chrome.exe	92
PID 4588 wrote to memory of 3376	4588	chrome.exe	93
PID 4588 wrote to memory of 3376	4588	chrome.exe	93
PID 4588 wrote to memory of 2116	4588	chrome.exe	94
PID 4588 wrote to memory of 2116	4588	chrome.exe	94
PID 4588 wrote to memory of 4992	4588	chrome.exe	95
PID 4588 wrote to memory of 4992	4588	chrome.exe	95
PID 4588 wrote to memory of 3808	4588	chrome.exe	100
PID 4588 wrote to memory of 3808	4588	chrome.exe	100
PID 4588 wrote to memory of 4368	4588	chrome.exe	101
PID 4588 wrote to memory of 4368	4588	chrome.exe	101
PID 4588 wrote to memory of 3776	4588	chrome.exe	107
PID 4588 wrote to memory of 5684	4588	chrome.exe	114
PID 4588 wrote to memory of 5684	4588	chrome.exe	114
PID 4588 wrote to memory of 5976	4588	chrome.exe	115
PID 4588 wrote to memory of 5976	4588	chrome.exe	115
PID 4588 wrote to memory of 5448	4588	chrome.exe	117
PID 4588 wrote to memory of 5440	4588	chrome.exe	118
PID 4588 wrote to memory of 5460	4588	chrome.exe	119

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.property.com.au
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb27d1c728,0x7ffb27d1c734,0x7ffb27d1c740
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,7395831627492968741,13970461959611071021,262144 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1572,i,1796986346322839485,6684865823518890133,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,16682048612648918375,7049662679427746531,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2324 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3060,i,371209221160981272,13635242821177200616,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3080,i,13701145359277710674,7045373982921875295,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4436,i,9865067284435319804,11105351028318902427,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:2
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,4602813242759528803,16122165604667322796,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4968,i,9643652929838690987,10245384976619861733,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4984 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4836,i,12885692681198685458,18288499930404453416,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3912 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4680,i,1556851310239619054,8434278735101164865,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5596,i,6295393125956372003,2718271934114505717,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6496,i,15591799200312214694,284334539475602849,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6392 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4728,i,3215999726880880582,15586731769949729307,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5496,i,18200278096529405092,10666910017056913637,2097152 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6648,i,6109984556737701879,11688172291137224257,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6640,i,18083739461389496918,8101645390322826631,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6604 /prefetch:8
  2⤵
  PID:5440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5380,i,13771077405585280938,10723714852058270047,524288 --field-trial-handle=2056,i,9080367786458818709,11937410901275950346,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:5460

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3464

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 14f4cec5409797c4e5665e22aa138a49ac11fe71aeb74330cbfe7eff029fc306
MD5 1d00539e3c210b6434cb674f3a5de731
SHA1 16a9faddef28920da6ecd9d18bed21f2b2ad9720
SHA512 bec4746fdbfddff735f1c14865bc4136126d911b8c95b849bba969de5d71011323ceb1b818e29ca8dd95ee9231c8e36e21ab9c733fdc45d8b867b00f4c92a34e
TLSH
T10CE0AB6AC921DC2718FC0718A0051B46E758136B2B40C94B3B3C860C8FB56370681C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 92KB
SHA256 5c3107b078214b12fe5fa4e7ced840fe240851b4512f8e595f4ae5483714fef6
MD5 e4516cb27e9c6c67c948dd10a4e95284
SHA1 1612ade78937a64a870765abc64102aa18763372
SHA512 f4ddb725480f4b4acd9523f992164a5d390aabe3cfd3123528010611d50b95ab6e754145f61d1a82014e8a9096aff3d98261b501bcd5b018e4b9f5a71281872e
SSDEEP 1536:Kr1FDVVOkBajc0yM1XFPdXn1IGeCWKAQpmj6hQ+CB/LA5/vDQ64CZJhtun5K:a13ZAo0yCZaGFACcoCpA5zd46uQ
TLSH
T18F931263F39A6F034491977EF679D4B211ADA945C441A8F6C0F6817F0A0FE1CA65A0BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 589ea7d685ac3efc9e5d2e21a44f7299918890cf9ebb237f6419aa9aaa44c907
MD5 c6020faa8dc33ab3535a2c96d0d45ee0
SHA1 ba9977869261686d4d4c64d8b2701c6cabda82a0
SHA512 400f7de3632a7c3d05314734773e46f9f620e8a636db30bb3bbc18b922b56a9ad22f12a16683209fafca369ac393e9057b65d418b0078ece63992d3168ca6fea
TLSH
T1BC4155A8C6C8B43DDF7E2E7913D08DE13B75905E065A1F9B82B4B3EA55833D34E81815
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 2c2668648873ff96cd06fe224f6cb3754d47ef224e1ef19dcca197c3680c6f56
MD5 cdfa5b5acfcee1e02f972ff9cd4836a8
SHA1 9018ae0ee745327c4e701931f87e9c39a999fe74
SHA512 964aad6598ea2fd84e8107ce9e4de7cc1e6687933b2d395546deabb70d335a2016dad4b3b127d070a3a053b83c0bdf3199e60c363a71900c5f500240333554a6
SSDEEP 192:DkFkPkwQkikskmJaIaEdq5LkIRkPk6k7kMkFbkFSkTkNklkRkGkbkqkAkHkLRk4G:DI0fQXNfJaIaEdq5LzR8xS5GbGSK2665
TLSH
T10E22CDF75BB08D2E8A11C6F15A442D1BCE591418472C3869CDE0FF4B67FA572E201A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 590a4659295e09c351f18571c9b34ee28f0f48df6c381a3c7b526fdaa0b22258
MD5 48a7a69d9d1fc3f1143f701996c8e601
SHA1 0048e7fdc09fb045794d117099597197a8409681
SHA512 c7eebb2470d7bbb9ef2239c998cae450f841b0c36ad74062499eb57994da6b3ab5715a2de24e72576726b0bb740190fba83815a50d88f21d00b4ef02b981a933
SSDEEP 192:IR/VHNBEP7v70pAPRp2dntZ9+Hsb+WNnTBhMK2WSkO7ja7DPaukngcCjVyIsnAUp:IR/Vt4DgUXy8wFz2KOMaTNKe
TLSH
T13242A62EAA107D7B9DCEC225FD627763D7F6102125952E84EBFC8A1C16D76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0071e654e7ac363c3d725c1a9636c8c3a4c188393512b6ff71faa54d5a634c0c
MD5 80057442ea97371de72b18d49414410c
SHA1 854b3b3b2de5a3cdbac187d8cb3ac1a28197263f
SHA512 d2f9969e1fafd1a06f24e2e3d10169880f23ecf17e2584186c8c55f506fd3aff77aa236bc345c4478f449635bfe17d6a7e7ad80dc284dbff5f6a0fb8e9fb3f54
SSDEEP 192:IR/VHNBEPChv70pHPRpzdntM9+Hsb+WNnTBhzBeiSkO7ja7DPaukngc3jVyIsnAI:IR/Vt40gZX88wFHeeOMaTNVE
TLSH
T1BA52B72ABA107D7B9DCEC225F9667763D7F5602125901E84EBFCCA1C16D76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 44b7d2d46c02ce01b5dbc63e65fff63e648b31bc3e045d39c1e1fe93579f2d64
MD5 cc39142cda995fa5e97f6e49cb38dbdb
SHA1 b3dbd9ff7de553bc083315c16cea35dd77128bef
SHA512 c6826a9e0ea3d52e366e15d25ef1e3c0bb3561bd41b8a8ff05d5988af23a52281af4091e8277d849b29fab606ab2abecdaeaec311d7df78f669618deb6762c06
SSDEEP 192:IR/VHNBEPBv70pAPRp2dntM9+Hsb+WNnTBhzBeASkO7ja7DPaukngczjVyIsnAU3:IR/Vt4RgUXz8wFHeoOMaTNBE
TLSH
T11552A62AAA107D7BADCEC225F9627763D7F6102125D51E84EBFCCA1C16D76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ca4370991a18c82e87bdbf672d83093866f30a3f23063c4eee1c802afe2ff055
MD5 d9c4e8cd362c8760a0f1773d872ba29f
SHA1 a12e22db179d0db9bee9d73a5a0478db150fb9ca
SHA512 459ef82091044edd8dafba7edd3e61920a47206dbbc433964ae6223cb94f5d459c5a02b70005286433eff36c2200b3841de8c079575791c2ced82d9b7abddb1e
SSDEEP 192:IR/VHNBEPAv70pAPRp2dntF9+Hsb+WNnTBhMK2WSkO7ja7DPaukngcCjVyIsnAUp:IR/Vt4cgUXu8wFz2KOMaTNKe
TLSH
T10242A62EAA107D7B9DCEC225FD627763D7F6102125952E84EBFC8A1C16D76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f537fae2a711ef1b3a384ffff908411764caddd865782393d6d29c0b2d50cc3f
MD5 d6107db335ec0245f760917c5cba4dff
SHA1 d0cca4b76b1b59e36f4429996363f0c54ebb4011
SHA512 d946d12b294283fc65f89af7824e2c2292d7eee9c5fe94b39dde8a4f2f68caa2320bb312e66b34bc68878e57ffe2a674cfb790609b1a92e8bed310c0a48dcb7a
SSDEEP 192:IR/VHNBEPMv70pHPRpzdntf9+Hsb+WNnTBhDPY6SkO7ja7DPaukngc3jVyIsnAU3:IR/Vt4YgZXP8wFJYmOMaTNVE
TLSH
T19C52C82EAA107D7BADCEC225F9627763D7F6502125902E84E7FC8A1C16D76CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5e51e7ea2d41add409d2f64f5b61bb7f32f41c154afb1548e377150fdecb5fa1
MD5 91a58fb0ba6b739278b6df28f3c458c1
SHA1 7fafa3d7bf01a98522b1139360aa5a8890df0428
SHA512 031233da7b33eec65643e38335d61899cf474dac0cf732dfa0d76c77dd7885f05ed4ba7da13c3ca37a066f486ab33647955e7081eb25eadf83b0745a65b7a6c5
TLSH
T164B0121080815111C05202B0124318DC71A46F14E60A3B0943E06A72DC251718114050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d358.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58d358.TMP
Size 96B
SHA256 7c840bc1930dc0b883113fc8773ed73bf24cfb1f750dcedec8ac644e11440c94
MD5 7eaa39edb28e3b431a8991342e404b39
SHA1 17e8df303e67ab97a6d373b692310395126ad0cb
SHA512 c90a7fde65c02d1d66547767132018a9c3974ed1745525a9b8f737bb43aaaa87b4b1b71e56a3c6e0d6e6b0879530a23d5cec0c6e1cd5c7371dba33d54f0e73b2
TLSH
T1A1B00255D1927712C14303B0299695D9B1E0DF65C643121393F05BE7FC29771D5652A4
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 80a359dd774960cec21d91be995de765ab359c1c61676263fd405ecd475aa9c1
MD5 79493f0ab1cd20ba734989d5b585dc4a
SHA1 d3d6667aca1d9e86da805e6ce1cf5fdc5c5dba0d
SHA512 781287556943b6c7d31775f5207ea7fa4e8e4985bd00e52e0443fd24bd65ebd6c968afbe9793afc39ac755fa4b891098cdeb0ed0a292ded411fa7da2b683ee60
SSDEEP 1536:vLuyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:DUqfd7NtZL8cHQRZEQ6Sps3
TLSH
T15CC30237EBC21E339ED2DB64B5130F9653F644AAD034D301EEAD3BAB6883595A44249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0a5cfda18a175fe11bf63d3a81401fad53a3ff7070ce720cd15e407a592a0036
MD5 1c4f87c475dfb1c8a14b8e27a0ff934c
SHA1 c53ac4603e1841effec1aab6caad7bc2e72be90c
SHA512 fe01fddedf5881733f9c450ac9a061f5968fbe6bd182d98f6b893e2cfaba1c734f1424b4aa3ae6f12a781a2d43db914d867eb348ec873b317f63ad548861ca2c
SSDEEP 1536:v25yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:uXqfd7NtZL8cHQRZEQ6Sps3
TLSH
T136C30237ABC21E339E83CB74B9530FD797F644AA9034D301AAAD37EB6883595644245C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 69bc7c44f63ff450fdf23cd9b2e5832782bbbaf91d625ea3ed75aae6f56e55cb
MD5 b845e2d11e44c8949e9f330d5ec50d8f
SHA1 f643e5b550720087e69e467c114cdf6d4a332d4b
SHA512 efa5147aab23352daac7cec1d97e36131f47fd8bfc0602aeb5007e4dc5f6b37e662245b6936a73696a26898ac918b48aee148b830de26caaccec3c3e74e3229b
SSDEEP 1536:b/LyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:Bqfd7NtZL8cHQRZEQ6Sps3
TLSH
T12BC30237ABC21F339E92CF64B9130FD667F644A99030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4785743e998333530915797ac9bb79e558d97f21d9e457e86c215c448a65e798
MD5 dccfe4215ed410599c386c01b024a209
SHA1 29c945e17cb96cca9c92c8b0b217fac99c5c2a5f
SHA512 a6ce086eb1a7e1a094f0a9dd543fdfeedd7b93d8d93a342b3d64298e6a869d9fbff12d934da2d247f16229693860a936bd9e4d1c15102cb1436adfde5f758c2e
SSDEEP 1536:c25yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:rXqfd7NtZL8cHQRZEQ6Sps3
TLSH
T10BC30237ABC21E339E83CB74B9530FD797F644AA9034D301AAAD37EB6883591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3cdb81eb490f9f0d3552c042c7b4b30f9490b6cd986cded76fc3ed5f3c309b94
MD5 74722fde0a1a348c1e61df5d50a81c01
SHA1 01eb35800caffe7ef8f253932dba445d44b225c9
SHA512 961bedcf999a635e85f0aa7a211d92053ca9e0d0590304f2e4116f8273e542ddeec68c5dbcbaa4af88ab57af0d219626537c538a7ab725d5b2f4f02450ecebc7
SSDEEP 1536:cJ5yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:sXqfd7NtZL8cHQRZEQ6Sps3
TLSH
T13DC30237ABC21E339E93CB74B5530FD797F644AA9034D301AAAD37AB6883591644245C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download