hxxps://survev[.]io

Analysis

user interaction
yes
max time kernel
600s
max time network
426s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/06/2026, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://survev.io
Sample260630-2etchahs5k

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1192	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273322909847478"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{CF9B65F5-B6CC-4446-9E4D-2C45FDDA16A6}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
3224	chrome.exe
3224	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe
Token: SeShutdownPrivilege	1432	chrome.exe
Token: SeCreatePagefilePrivilege	1432	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe
1432	chrome.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 1432 wrote to memory of 2360	1432	chrome.exe	85
PID 1432 wrote to memory of 1756	1432	chrome.exe	86
PID 1432 wrote to memory of 1756	1432	chrome.exe	86
PID 1432 wrote to memory of 1192	1432	chrome.exe	87
PID 1432 wrote to memory of 2296	1432	chrome.exe	88
PID 1432 wrote to memory of 2296	1432	chrome.exe	88
PID 1432 wrote to memory of 4696	1432	chrome.exe	90
PID 1432 wrote to memory of 1832	1432	chrome.exe	91
PID 1432 wrote to memory of 4696	1432	chrome.exe	90
PID 1432 wrote to memory of 1832	1432	chrome.exe	91
PID 1432 wrote to memory of 4068	1432	chrome.exe	92
PID 1432 wrote to memory of 4068	1432	chrome.exe	92
PID 1432 wrote to memory of 3340	1432	chrome.exe	93
PID 1432 wrote to memory of 3340	1432	chrome.exe	93
PID 1432 wrote to memory of 3260	1432	chrome.exe	95
PID 1432 wrote to memory of 3260	1432	chrome.exe	95
PID 1432 wrote to memory of 3380	1432	chrome.exe	96
PID 1432 wrote to memory of 768	1432	chrome.exe	101
PID 1432 wrote to memory of 768	1432	chrome.exe	101
PID 1432 wrote to memory of 412	1432	chrome.exe	102
PID 1432 wrote to memory of 412	1432	chrome.exe	102
PID 1432 wrote to memory of 2392	1432	chrome.exe	103
PID 1432 wrote to memory of 2392	1432	chrome.exe	103
PID 1432 wrote to memory of 2648	1432	chrome.exe	104
PID 1432 wrote to memory of 2648	1432	chrome.exe	104
PID 1432 wrote to memory of 1760	1432	chrome.exe	105
PID 1432 wrote to memory of 1760	1432	chrome.exe	105
PID 1432 wrote to memory of 3612	1432	chrome.exe	113
PID 1432 wrote to memory of 2156	1432	chrome.exe	114
PID 1432 wrote to memory of 2024	1432	chrome.exe	115
PID 1432 wrote to memory of 3224	1432	chrome.exe	117
PID 1432 wrote to memory of 3000	1432	chrome.exe	118
PID 1432 wrote to memory of 3000	1432	chrome.exe	118
PID 1432 wrote to memory of 2824	1432	chrome.exe	119
PID 1432 wrote to memory of 2824	1432	chrome.exe	119
PID 1432 wrote to memory of 2972	1432	chrome.exe	120
PID 1432 wrote to memory of 2972	1432	chrome.exe	120
PID 1432 wrote to memory of 1260	1432	chrome.exe	121
PID 1432 wrote to memory of 1260	1432	chrome.exe	121
PID 1432 wrote to memory of 776	1432	chrome.exe	122
PID 1432 wrote to memory of 776	1432	chrome.exe	122
PID 1432 wrote to memory of 3136	1432	chrome.exe	123

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://survev.io
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff97077c728,0x7ff97077c734,0x7ff97077c740
  2⤵
  PID:2360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1760,i,15952409564858172899,17089365375010758259,262144 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,1368943409443898260,6905487456853276538,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,15448737992161726560,1783149904694284165,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2440 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,8179978758393782414,5080630655975057698,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,1336113741683039462,10066894663485682586,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4564,i,11687214161569884217,4477680596747788897,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,2598889704520703950,7005979743176770367,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5032,i,11985008948820663558,7259430415535474350,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,13684821004809591529,3944611947006820470,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5908,i,2358210914997906763,6094714373669816696,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6112,i,14233773216648212436,7930192076505108959,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6140,i,3625930449342523386,10540058967734656009,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6152 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6292,i,15552886416236801208,1385257525011688678,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6336,i,7840404803443401383,4728619580601051775,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6656,i,13850735966080545559,16673185330617087815,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6740 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6716,i,8107495028583214956,5500213943457693976,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6712,i,3629273236372658921,12240495382007804934,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6692,i,1758286943426597411,9077681142272055216,262144 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4460,i,3962074303794267966,423068156617251701,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6592 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4980,i,7743348837735308489,3144852178973939090,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6960,i,8660575561550075449,2957459507368386696,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7148,i,9906238492653948161,8264563150545261262,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6476,i,4842244201031414031,1729674939822076379,2097152 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3288,i,4028535083785142168,1725918601020901261,524288 --field-trial-handle=2020,i,15838100656634923364,381485458243805669,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3136

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3292

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b1457f3310d79c643adc80f24d5c69860e8bae06365ca1b1176790085a2638f
MD5 0b2ffb4bec289a580ece3204aece95e8
SHA1 5bf5413fe6534011af5781e76aa06a72aea38b79
SHA512 1a20918d1a00b09a77cbf3f527b595ab518d9a6cdaa4d3cf85381e3e54cce64240d85ab5e94e281ca31a599c5d1d8e8dc951e68550dbaa50fea5809441699630
TLSH
T15EE02BBBCC61DC2B29FE071964518749F610135B2B80594B763C8E0C8FF1A3B5645C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 672B
SHA256 3cb93f521a64679655f8da95560ee89503cea47e9dfb331a74872594a0326e0c
MD5 4e6e924d82dfb6a031b883dfb9c4373c
SHA1 fa5949ffcce479db9a1a5c5ea60c4107f0f950d2
SHA512 abc266e900af5a30064f21e994c5bb7f29ee821f46df3e4c54728858a64bb5edfb959102545e03872be1ada696da8f2f27e9988250665b919e076cb9a9d7b1b6
TLSH
T1EC0127A043D524E1DF4117B4A5D01DA772744C2F461F4F25BFD8003869223F22E444DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1008B
SHA256 90c8f7ac2964cf175f03434f914f3c40e597dff3baab473e50b3bd15286f6f74
MD5 7fc6c20afef2331320fcc02762171617
SHA1 8eccb547bd349fef0a4af9a4969039c91881dd5c
SHA512 242cd3f038f2d57f4f301e4a5c272ad34ee7ee60abe40dbd1c4a577ef4adac9f8b0a1d12782c56806728de2c0810bec8ae8f84fbe68761c8f85069fd6e00617c
TLSH
T1B9116850979418D4DF8002BB66C10D87B1B94CDF855F0F16ABE4143565723B65E984D6
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 cd69494d5c7a9e4623c814549b674b33c1402bf028346e1be822f8c534637af2
MD5 c86f3703b02540eeb38133b701599198
SHA1 a4f34d8846e37b6e59490ad5207319f3f1c6f993
SHA512 2c7ee1fad001ba5d384bc5c4f34a133d9411fca1337d6e6ffdc6c476be498185892cd8622bd4a2dd0716896be378ebe1457180f1e3ecf1c61e8f33c8d9a5269b
TLSH
T1593168B7C7D8857D890156F5BB156E1FCE290D14532C3C5AC8D4EE0B53E18B1D24068F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 9ffd2ea176f0524819363ab6465878259be26207eedfd802a4c2e7a3c8e9d037
MD5 c6483afccc23fd62664948200996c25d
SHA1 fc76ce80283fc59f36043dc777cb73287391c1ce
SHA512 a4e278108466e83dadccb71b635000e718c14667f05e56bc684325917d3a73edcc0701677961e28c4da521d65ba91b698acd64f9e824e6478ede02ccc1fe9feb
SSDEEP 384:DVBBZ+4exeSFsdiJ2IaEahbVVEPMWHnblArwV6kFo9HRmb6h6W61NfR9Eh8+GZLk:YcnITA
TLSH
T10A527CF7C7F9592D893692F1BB04AD1BCDD804249B1D397689E4AE2B63D2831E20075E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 11240e1177613c96cf6cf24e665504a762da2831f9243a0b9915d09e3d87a506
MD5 f3fcdb770f57099721d31d4721da2a83
SHA1 f3ef28cbf5698807e4de04a0fab8f71d30f003fc
SHA512 eb2e93f48b4a483854486bdbe7fe8b6814cf73aba78d0782371f479d1b27c9abb9c09b84a08e70544e6b920a61ffcad13eec13da337091fa7a9abf2e6a8048c0
SSDEEP 384:DVBBZ+4exeSFsdiJeb3IaEahbVVEPMKnblArwV6kFo9HRmb6h6W61NfR9Eh81ZLt:6cnITd
TLSH
T1B5628BF7C7F9552D893692F1BB04AD1BCD9C04245B1D397689E4AE2B63D2431E30075E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 a50266db8a3de02253385bfe55205783c47ae8889e69b02b8971e3b1f105326a
MD5 833c3f40fe3313b72dc320d48993420a
SHA1 0391819a4d6ac57b26ea0d7d190ef6393b540365
SHA512 3e01d175ee9b1bf34ae361164bb2b851b07c15ef14dfb89c44d6d0d0cbb18bd9dfda9279d1e1ded373666cf190ad5d07e44e223e23413fd41134af40ebb3ce02
SSDEEP 384:DVBBZ+4exeSFsdiJebj8BenMCZCaEa1VVEPMKnblArwV6kFo9HRmb6h61NfJh82n:2FcnIAtBEyFk
TLSH
T1E8A28DF7C7F9552D893692F1BB04AD1BCE9804245B1D397689E46E3BA3E2431E30075E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 592035e4d96469e212a024e4b6e654424439973008c09f918dff24770bc7ea52
MD5 c0a260e141f92216f5fe325b498541d2
SHA1 b7da46749f0a3412f31f498206fe3b52289d299c
SHA512 c2bb4cfd8bc7fa0679397d801849b2ab4f759ff6aa0a9d740250b3fa419774c4811a2ceae8cbdaaa4ec358468e8a650ba9b41e873e081400c8a7249ed8ad7b54
TLSH
T17051BE938AFEB45B103919BB0E48B816AC79B431024198F5EF97D56CB0924F70B1A432
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0676a429d7ac645a5cce575feff8dc776212809c25c764c16142132d2cd195de
MD5 408161a4713d729b71f9d97cb3bd5731
SHA1 a6fc5714ab715dddee08bb30dc03d076f9859e10
SHA512 e99b67725d1c36a80239e02e72e55d26aee7e03c760120a728a9617901db3c3c319908ae97df209efeec149f495970dc01cccfbbbc07d54611a5cb7984148374
SSDEEP 192:6RVbAYxHHq8g5U/Av72vAPRp2dVbJlVk9THsb+WNnV4jZVCi2Ddvdl2IKReayZrH:6ReiZFcC6X1Fwe12Pl2IKbyZrZ+XFhRe
TLSH
T15A42952FA914693B5CEAD219F961B76BE7F6103136D41E80EAFC892C15E75CC322740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b5dfe157fc6070ac45b4165cd65f7014c5cc31d9419bf113b504fc4c98dc44b4
MD5 edc52d122c253cf3b6fa5102da2da130
SHA1 bceaa3dfca0a7ebad640a0333d9fc3c977c08252
SHA512 2debe5a83bab8e982e725b055c94d121a360d27519203d7484d3aa40997f0d47cacf06274b657beafcf5d9d9875003815cdc09032afd090432bda2d3223a4cc2
SSDEEP 384:6ReiZMcC7XaFwe1ebQl2IKbyZrZ+XFhTE:tiZMrWFwDbM2E
TLSH
T14142A76FA914693B5CEAD219F961BB6BE7F6203136D41E40E6FC892C15E75CC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 000d7b877cfabfc7a4f536420c3c5fe070d681d080e07e211291b3e0b150ab44
MD5 bde01b0e5e8f4c4eac2b6cd22c908da4
SHA1 7ec049b8e02383c887c1666ee7dbf10bbf1c5b6b
SHA512 9ff1c4d351eef558ea848ad3db00a03ff0129edaefa35a88cac07523cdb804d00fe2c68e16de42e5dc6f454921a7fe68c66c5c2ed5fcdd73b261ec0f3aeedef4
SSDEEP 384:6ReiZdcC7XaFweGerQl2IKbyZrZ+XFhTE:tiZdrWFwErM2E
TLSH
T11242B76FA914693B5CEAD219F961BB6BE7F2203136D41E40EAFC892C15E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0149065d94cacc61e9362c9ccaab71809931b88d79d3d0e21f056d9d91de62bf
MD5 01ba9f159833de0a0ef8f830ae754f00
SHA1 2a87f445300fd69c2fdcc498e7296266c3f31e74
SHA512 e3b3ed48f06ca3f531f8aaa30d89acc5d4131decabcf479d0da12fd1adb667a2bbc07c42d34437b2f5bfe5d4aa6412a3fe583fb9a41ca607a1e0d120835b6b25
SSDEEP 192:6RVbAYxHHq8g59/Av72vAPRp2dVbJlVk9THsb+WNnV4jZVCi2DHvdl2IKReayZrz:6ReiZacC6X1Fwe12hl2IKbyZrZ+XFhvE
TLSH
T19042A66FA914693B5CEAD219FA61B76BE7F2103136D41E40EAFC892C15E75CC322740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 66db00e7c50f5cee8a50c9adf7ca3d4e3253564ef3a78f9deddf9885c7a6e991
MD5 beeb6d6feceace050c678d047bd56176
SHA1 1de407012a823a18f629a19e1e036de211a4afbc
SHA512 44f68fb323ed107f5c47e698795a872c4d7e1092ec7f2afa7e34f58b548ee700d52696a90eeb9f1fe85b427568a68ea3a17fd3f52615d9dfd6f29c7d678d9f64
SSDEEP 384:6ReiZHcu7X4FwKOMjQl2IKbyZrZ+XFhzfE:tiZHjsFw2jM2Pc
TLSH
T1E452B86FA920597B5CEAD219F961B76BE7F2203126D41E84EAFC8D2C15D76CC311700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 018e371453ae3db01003953e2f52e14b54e4651f1e7c2f6c43ce2f8e8ec1f24c
MD5 303f15cbbd31a356aceaac0ea3f72c24
SHA1 b79c27292ea5a0541e4684d3fe71caa788cb5935
SHA512 e0897968fe5c8026081db64b86adfe646b27aba75b9f405e639766ea38d33679375d71b083533ae205e68b496ed0519d8087fe4a4b1d928bdfcccf1842215677
SSDEEP 192:6RVbAYxHHq8g5L/Av72vAPRp2dVbJlVk9THsb+WNnV4jZVCi2Ddvdl2IKReayZrH:6ReiZMcC6X1Fwe12Pl2IKbyZrZ+XFhRe
TLSH
T1DF42952FA914693B5CEAD219F961B76BE7F6103136D42E40EAFC892C15E75CC322740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5fde9442335773753b1a376745b849a01b475c413bb77b8ac0aedc9fabd076c1
MD5 bbb78fa493d0c4915165b255da7cfd53
SHA1 94368747ec9d67e22e9ce611c0a3085ae842c2cf
SHA512 cb013a15d347d29fee4248ed06eff78308031b68279f6e7144cac36127467b74a55a864ff1a035fc452881ee10bf23b74bf55c33d19989149085e67fb67ddd2e
SSDEEP 384:6ReiZHcC7XaFweOMaQl2IKbyZrZ+XFhTE:tiZHrWFwiaM2E
TLSH
T12142A76FA914693B5CEAD219F961BB6BE7F2203136D41E80E6FC892C15E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
SHA1 c0965f169b36b690aaf700b8f80359944a908774
SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
TLSH
T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 35657afb7ca48a516e1034f5983aa8dc61d9a23eac1ea5f36a99fcd0e87d2ffd
MD5 d46459585f704262450e0412a41c3ee5
SHA1 22b13f25e34bf9020a27b5b2e9a4c83f5d193ddc
SHA512 e66d1b79b4116e16f0064dd701581624bf7322f04934956e400ff588ba0f21ee60139422f391eb4de1fb28cad24f5b9c0c29ac4fca7306eb1b7f91b689553929
TLSH
T1A1A00224264005D2D40002B11886824076117C362589160178D45C4FAB71281C345160
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 347676805b79b6a798daa4db955018a870bd8d1a14196b464508f4721b5e604c
MD5 41e889a02babca921c80be686458e5a7
SHA1 3b5dd764eaceb090659525d7176d3275718bc0b8
SHA512 3ce71fceb83dd065557e4d53dda3ae0d73379aea3ba1934959712e0150b6a5a338816067817818759813e3197ebfe99d6f21cc5d8b4049a937a6188ff404fdda
SSDEEP 3:MsEllllkEthXllkl2zECllVta:/M/xT02zh5
TLSH
T1DC44041C7FD10507C54010305117C7510371F4105D555747345135335CD55400C41015
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ce7090c7f71e82829742bba1cf59f2e8d76e371f2cf63dbff17301b1a19f7e6a
MD5 15f58ce7fe1858cb256c7195b6313f5c
SHA1 38d0b6c94d4c7d48e768c63793b7bfcddc707b95
SHA512 774a85d941c1cf3ea51bceb4eef5254c7d64e05b6803b31517232b8a6dba26215ce432bb6257be6fb9fafddb6c353f991fb67b0f9aa8cf4778f58d0938323509
SSDEEP 3072:OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Jm7Rkm1tYpBeh2BAom
TLSH
T1FBC3023B5D75A83759B9B70FB08E0B1F1EF24AA6C920DA52C8D95E0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 44e1066b3f9f312591f059f154454a567de7020707667c36a7f498cdddb131a8
MD5 33fac133f659f5bf3dc350cd9ffca612
SHA1 d42df187c086a71362ffdc906a16d3401997279b
SHA512 ce39ab0712eb22091f1da026c3ea6e594a414dd70f6a123f7980c2f07dce75cc451e6d40609ed0d1229f030228bf32cc7ab2724625f290b51a5b07d776b13ca2
SSDEEP 3072:k5Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:k4m7Rkm1tYpBeh2BAom
TLSH
T1E0C3023B5E64E83659B9B75EB08E0A1F1EF14AA6C920DA52C8D45F0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d0d072e8b408716bff6925495a75adc703f641c58682c6099c7797ffd2e8093a
MD5 93f009ae2c222c4e9cd81af347a15e6f
SHA1 157a5d3fbc7d8bf156741b94edb8ce45f4d269ce
SHA512 581accfb3e2db24a2b5e52d5b2dd5f2c496957838264b64fe316eae5defc25bfa8d074cf0059eea7327b14666db4dd4e5e44a3a46331109cd51ad73aef40cb6b
SSDEEP 3072:KGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Nm7Rkm1tYpBeh2BAom
TLSH
T1DCC3023B5D75A83759B9BB0FB04E0B1F1EF24AA6C930DA52C8D95E0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 a92acccfcb3187008f102258f7d00bfb511258a28a9f11b474c14d7079ac5fe5
MD5 9d2854c7a138a7de8a11f8265a0c37d8
SHA1 937b767c826dbc8c89a7aacaf4a98d1332c08fc4
SHA512 d52ab680327e115c730459e4a21a4d40fb334428e9697309a9b71ee200f6a8a5366e1b28e672aaa1c4e365f889da7eedd24fca46850710bfb1c7b7eb285dbe60
SSDEEP 3072:UGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Xm7Rkm1tYpBeh2BAom
TLSH
T126C3023B5D75A83759B9B70EB08E0B1F1EF24AA2C930DA52C8D95E0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 7f3d1d30d3f1109fc20a18b1a5b8c1bd2029c0e66c0407d6d5c0c02638672eec
MD5 6f6019aaf6881ba6e23627a4453ae875
SHA1 af539d4858c4d5f21dcba351ee2bd71fd40306a0
SHA512 26bdd8520947881658641b0a91975a4b2e6baeabcb1b43c2aa5f786ac21ad0025fdff215829a160fc0947add6c0229485f25573d6646dcd83d986b5754f56840
SSDEEP 3072:2Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Bm7Rkm1tYpBeh2BAom
TLSH
T127C3123B5E75E97759B9A74EB08E0B1F1EF14AA2C930DA42C8D85A0437FA7CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4c5f1b45c5338aa3776fd5d2e555ccc167a41d36ff0e08edb168c04c7cafac95
MD5 7204e645be1fb6b2f658c8a48e09dfc8
SHA1 b4cd69b206595d8ae270d4946caa1ac5c5c35fd8
SHA512 330f8be56c8adf39229d45fabd766eb8f0d6bd3f6c234c7d8ae679dfebd433ba56b82a770cd57f854720d32ebac3ed5717b05f82e0f12f5791e2db8e734985eb
SSDEEP 3072:x5Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:x4m7Rkm1tYpBeh2BAom
TLSH
T1A2C3123B5E64E83759B9B75FB08E0A1F1EF14AA6C920DA52C8D45F0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download