hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
899s
max time network
900s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 04:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260705-emgbkshv4w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2216	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276978223336324"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
840	chrome.exe
840	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe
Token: SeShutdownPrivilege	1844	chrome.exe
Token: SeCreatePagefilePrivilege	1844	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe
1844	chrome.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 1504	1844	chrome.exe	85
PID 1844 wrote to memory of 3652	1844	chrome.exe	86
PID 1844 wrote to memory of 3652	1844	chrome.exe	86
PID 1844 wrote to memory of 2216	1844	chrome.exe	87
PID 1844 wrote to memory of 4484	1844	chrome.exe	88
PID 1844 wrote to memory of 4484	1844	chrome.exe	88
PID 1844 wrote to memory of 3844	1844	chrome.exe	89
PID 1844 wrote to memory of 2628	1844	chrome.exe	90
PID 1844 wrote to memory of 3844	1844	chrome.exe	89
PID 1844 wrote to memory of 2628	1844	chrome.exe	90
PID 1844 wrote to memory of 2500	1844	chrome.exe	92
PID 1844 wrote to memory of 2500	1844	chrome.exe	92
PID 1844 wrote to memory of 4756	1844	chrome.exe	93
PID 1844 wrote to memory of 4756	1844	chrome.exe	93
PID 1844 wrote to memory of 1744	1844	chrome.exe	96
PID 1844 wrote to memory of 116	1844	chrome.exe	103
PID 1844 wrote to memory of 116	1844	chrome.exe	103
PID 1844 wrote to memory of 3288	1844	chrome.exe	104
PID 1844 wrote to memory of 3288	1844	chrome.exe	104
PID 1844 wrote to memory of 4584	1844	chrome.exe	105
PID 1844 wrote to memory of 4584	1844	chrome.exe	105
PID 1844 wrote to memory of 4412	1844	chrome.exe	107
PID 1844 wrote to memory of 4812	1844	chrome.exe	108
PID 1844 wrote to memory of 3224	1844	chrome.exe	109
PID 1844 wrote to memory of 3388	1844	chrome.exe	111
PID 1844 wrote to memory of 3388	1844	chrome.exe	111
PID 1844 wrote to memory of 4204	1844	chrome.exe	112
PID 1844 wrote to memory of 4204	1844	chrome.exe	112
PID 1844 wrote to memory of 176	1844	chrome.exe	113
PID 1844 wrote to memory of 176	1844	chrome.exe	113
PID 1844 wrote to memory of 4220	1844	chrome.exe	114
PID 1844 wrote to memory of 4220	1844	chrome.exe	114
PID 1844 wrote to memory of 3840	1844	chrome.exe	115
PID 1844 wrote to memory of 3840	1844	chrome.exe	115
PID 1844 wrote to memory of 840	1844	chrome.exe	116
PID 1844 wrote to memory of 2140	1844	chrome.exe	117
PID 1844 wrote to memory of 2140	1844	chrome.exe	117
PID 1844 wrote to memory of 668	1844	chrome.exe	118
PID 1844 wrote to memory of 668	1844	chrome.exe	118
PID 1844 wrote to memory of 4784	1844	chrome.exe	119
PID 1844 wrote to memory of 4784	1844	chrome.exe	119
PID 1844 wrote to memory of 5112	1844	chrome.exe	120
PID 1844 wrote to memory of 5112	1844	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffabf3cc728,0x7ffabf3cc734,0x7ffabf3cc740
  2⤵
  PID:1504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1688,i,13308896362351701842,11183952761952630473,262144 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:3652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,9589555617659173747,1964327111252595670,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,259147453567274393,1344762901503104007,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2348 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3056,i,6844083191958541872,4405158853670166120,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3100 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3064,i,17681311805986102705,7847835658531901879,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4136,i,16955736894596395126,1091109319416209683,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4140 /prefetch:2
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4708,i,11013391052206909843,5652027052699431499,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,5304477208405021100,14709108702512461718,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5592,i,4984370651488970153,11505204655055083493,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5792,i,7251402640978902519,13858738456597830269,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5908,i,269499655262778075,10001318840326988151,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6448,i,8011068044595169497,6308868201253656577,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6528 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6456,i,17194283313111324497,5191931612945265139,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6496 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6484,i,15899327258172353248,1271630823258373435,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6488 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4280,i,17885866024177675571,8999483609745109428,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5972,i,3317194726197763968,17276175807603477666,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6548,i,16399846721910626260,17338638248910780247,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3036,i,12876925680425059048,14214934174483411691,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6764 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6728,i,17270332480853426575,11557246578199108775,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5584,i,10520889168815780671,8352516068211760411,262144 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6992,i,2531846131753661056,239638055724728172,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7036,i,14883100651974830266,15098622650630537119,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6656,i,9226011799925550605,15201230911654645766,2097152 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3960,i,15193507789274047691,14744450128788968053,524288 --field-trial-handle=2000,i,15679265161460322259,1081260692666648901,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:5112

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2588

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

46640967-5ea5-4302-ba7d-1bf3c4b4f72c.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\46640967-5ea5-4302-ba7d-1bf3c4b4f72c.tmp
Size 414B
SHA256 0236a67c5f26b9f960f46185ae23798ecb5bbb8dda977aedd396345059a92985
MD5 75e1b779d327be169f2140ef12fe6ccf
SHA1 c6bd211a1b11006131aedb5a5d5ebedc9bb6a2ca
SHA512 dd08fe6ca4e3e0c24e5fb4b250e0f58b1462b8cae4429456b5f82b3a45ec99818b68df91603a777b89cfb9936edae036803750717673f546015bd5a5a710d86e
TLSH
T1BDE02B96C9319C772DFD071811A14B49EA5513572B80596F3B3CC20C4FB163E4596C6C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024
Size 23KB
SHA256 8546b79e46e3d0e652d205c7e079c7e85c5777504b3c326b6bd04a54a6e2d122
MD5 f6864d2a9ccce9e49ced2ddef89fa8ca
SHA1 46677ab282505653f5158c47345a00914c1ff8e6
SHA512 416b916066b58348395f634a7452995ff51e88a0d88adf3028e21364d2d184e5e38a747d2c0e40ceef7f76f9c49e6d0ca139aab9471ec15c0f826e9c13e08910
SSDEEP 384:TDfmsWKcxoh5dhUoULAsU1KPm49V4FvKMX4/ojgo2fBVdc+05BkyStGUaOikqsSs:neW5dGvLZPmFPo/sohct56yKGUZDZxXJ
TLSH
T1CBB2E12F631ACA26285921CBC55F8789980B4AF0B0BD9E57331838787FF561F43C9E25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 f5c033f77446fb16d461131b54cc12df720932f6d883a7e207a180bd506bd47f
MD5 0883e9dad3807efc4781c37353221546
SHA1 87c1b379f98471b39f0241e6f90e08401ef1e5e5
SHA512 c6a46f4acba09905d2a20e3e29cde865e05a1748ebc36a85e1fa0abcafbef4c80b855dc6db8218c194cf93ad2d4c8c89b8515fc2acc7b9ca1d5e3e935526687c
TLSH
T1DB41A8B57AD17E81EF4801380B9A0CB37BAB67CCC103DEE555D6C829B8663BC6D55808
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 d248eea3b3a8cc9285015917970a6a7feee72d4dabbc2901ef222d37ee9e90f8
MD5 31db4d203f9e4556fef9650e5d46e632
SHA1 ce748d94e101f3b6b5ead1572c65fbec30ee4337
SHA512 49a707ed746235cf10e9317a5a270dbaa14efb65114d531574d7b8a7f3356f788db14c7d0a682609504f4fc01deb197f3298c1dce3d5aa7f723b3928de483644
TLSH
T1BD4100A539C12A81EF8811380A9A0CB37F7B57CCC083DBA500B5CD38B8533BC5D96806
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 d0c693155031bab60745074f8cf56c7624f5e62654eaa4d6b165efadea079117
MD5 9dc0ad6ecde777ccb95a32167b834e9c
SHA1 85c2eebe2680f56f31927f1f37dd4898d71af907
SHA512 384347be0fc2986befb9c9568a56f5209786ee62e585d0514af97d0ad6f63482b279aa6f253a0dfc393432678e1d0796ae553cc60373e1ea324d6760c7764ee6
TLSH
T1B63182BA32D42E82EF8401340A9E0C637A6B5BCCC507DBB612E5CC3978973FCAD54808
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 9a510902e9032be9cab0bbf3920784778d33f4db23c9acc12ad16f10393e50fc
MD5 7c8568ed7cec2e5a2cdb9cb48b9ba356
SHA1 03746123734a79a45a2eb30773c5e1efe76cc537
SHA512 b9a39a3e91b835af64f39dc185d2f64534e22c9e7312d9f6469de930491928eaa9f1f6961ec2f895a1bfc60ab35a84b9f1bc16489d37dad42cab8d3ec5bdad93
SSDEEP 384:DiPtxZkd7eJJw0LFnw7jaEKu8RKrYJOBaIaEdiW4zSCIFRNqBjaqjS4B7DrR1Rfl:GitR8pgNQD
TLSH
T164927CFB83E8962DCA1155F4AB266F1FCE1D0524432C3CBAC9D8AE1B93E1471E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 892558dede30b3c2c84cba8623720aa7e59bc5b1ce7545374f8a75dca36100a3
MD5 02a6e7d9dc95bd0922e8ecc382c1f9c5
SHA1 abb1722079acdf706234ddf19d6e8abff08f5731
SHA512 a9a88021b363a01ba1dd8f1268b58ff247801171f0cfc5329c78d2db23645381846041605b31e5834065ac31160162153cbff89747a00cd748ee5deea8e718ae
SSDEEP 384:DusBenComeYJYsDZP41dAfKu8RKrYJmaIaEdiW4zSCIFRNqxBjaqjS4B7DrLK1Ln:37td8r9OUU
TLSH
T14CA29DFBC3E8962DC92155F5AB256E1FCE1E0924432C3C6AC9D8AF5B93E1470E21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 84984fe4f5f01c71f6bb880c297a029fb915c541608737e7a849ccaa86e7ec51
MD5 65a10214333f9c0cbe1ef338890fad80
SHA1 c1cf628c0a4a8ad6779622d4aa2b7fa2eb0978d2
SHA512 dc72211d101e4ac73608d9ee0738ff17db7ef9cba577457d46acbb084a8d064b7aa79dccbbed67b8de22d3c380dbe1969f546d1aeb335523b91d585dde82f82c
SSDEEP 384:DiPtxZkd7eJJw0LFn7jaEymIxbG/UT9HaZaIaEdiW4zSCIFRNqBjaqjS4B7DrR10:GltR8pgNQA
TLSH
T1D892AFFB83F8962D8E1195F4AB266E1FCE1D0524432C3CBAC9D86E1B93E1471E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 e4e8c6252ce9f60af7fe15696693368d17cfaa17739bbdf15f2cd1269de35e48
MD5 e72685d10c3ab595a21108ae5670d721
SHA1 f7c251b6673834cb3ab65f8ee3b4331be24b0ac8
SHA512 21ac71022ba0b5205c200dcdb0f34c92219288a281def221608f58bd21d04ab1906794fd6d786cb9d369b44cf25aef550240fb0d9a94499ef74cb38ec7501fb1
SSDEEP 384:DusBenComeYJYsDZP4NaIaEdxRQd4zSvqimizCIFRNqxBjaqjS4Boe7DrLK1LkfQ:3FtdwrXkLv
TLSH
T14352ACF7C7E8962D892155F4AB266F1FCE190924431C3D7B89D8AF0B93E1871E21174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 19KB
SHA256 616119f62085601427371db0b101c59fcb7456d9026988bbf10d6afa457508cc
MD5 4cb7225fc4cae1b4da187c571e0d3969
SHA1 0aadc7546c84559a7a2b715163268e789ad2bc4c
SHA512 dbcf465d72e302ff3db5cfdb9eb7ca717633c7a3aec16f8c5690db06db3f47a2c4d0480b14706990251946ec9d818eff50d1933914886fbac2ef3fcb0233fa4a
SSDEEP 384:DiPtxZkd7eJJw0LFnw7jaEymIxbG/UT52aIaEdiW4zSCIFRNqBjaqjS4B7DrR1Rd:GMtR8pgNQD
TLSH
T12C928EFB83F8962D8E1155F4AB266E1FCE1D0524432C3CBAC9D8AE1B93E1471E25174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 0e9a5cbd61ccd5d0a2293e9910711da715602dd0aaf1dbfb4c72f7ce13cee274
MD5 b81236bf0dc18db574ce86f847eb04a6
SHA1 c86744c51b24464557f947574b0d1cf0f0cb4e05
SHA512 ddddbaf604c17e36e250dd4435144853f4b579771a454d2b538b9480effc99ce6afba1ccc3725980a89cafaf38ced47466cce21b235abcf06a246221b1215e15
TLSH
T1E0416C9796BEF85F6039987F1E44FC0A7E76F831029268F0DE96836CB0825F70B16416
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5cb33b9966bdd283b3d3eda352ed16f5426d5f66eadd2036f87baf4b1c21f40f
MD5 2e0ec2126e36dd1d9b9e01449eba8478
SHA1 4da0d03478ce1f9e70672ee7c2843ec6a7bc366c
SHA512 b828bef27741fb8045bc21bccb19e7f88afd21941a51f66f1bfd5df72d6665c1eda4cbfecaf1129864a78f269b7cff32f8e8d756a6834ca00631d0961a6f38f7
SSDEEP 192:LRBcBhYL5nUbUlv7hpAPRp2HVIP95Hsb+WNQv4ZMZW1W2he8i3aZyVyIsnAUge:LRBmhW9VV9UX1rwfMqW7aZye
TLSH
T14852D62FB910667B5CDAD229FA627B07D7F6142135E41D80EBFC8A1C16E7ACC221705B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ada5d17211dc10ac1d01d0d9f791c0f232902b9762f50dff2d4004fcb5c2f982
MD5 0fa86798a072ea42fe882392f9f41c94
SHA1 3779906214c1f6b41a2b8b2f66f3043cf7222b22
SHA512 808f79037ac33d6e6df1cf25a02087b07cf45c17961a891440234858bd4ecf34d50abeb21975ed24d7831a0bdff40ef43bc53e6008617003394290e1845a1233
SSDEEP 192:LRdYL5nUbUkv7hpAPRp2HnE95Hsb+WNn4ZMZix2Khe8i3aZyVyIsnAUge:LRdW9VA9UXJrwkMm2vaZye
TLSH
T10142E72EB910667B5CDAD229FA227707D7F7142135E41E84EAFC895C15EBACC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 bfe4d9052118512d9783e993cace9730700a244b1c9dc601993b6c889a8465ab
MD5 56d24db88e0fca19e015b9a6f27c0dbd
SHA1 b13a004d0146aaf35bdd273f31c852bcf12a9ba8
SHA512 7a0770da990fa727f171004f5ca5e2a5a5682502b67d64a9ba90ee15ffa45e9f2d4238c101e98894fcd326976732a218ca08fc0c1a3d25bb25487fb205e8603a
SSDEEP 192:LRBcBhYLRnUbkGZTv7hpd3PRpwqn/AJPBApwJiqJFi95Hsb+WNcruk4ZMXWEqGWL:LRBmhWFid9LX5rwXMX4FW6aoyE
TLSH
T19762B76BB5101ABB5DDAD229F922BB1BE3F6202126D01D84FBFC8A1C16D76CC211745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 1c84118d712117f3e612b081a9cd1b98f277cf4667791ba893c0ade9645b0629
MD5 6157c933e2c7d2caed7cd8f299aabcbc
SHA1 069b9e63bd8f971114a7c8f3008dab06bd0a5fed
SHA512 c3d47961afd900bc6c105b2c6bbde9436b228ebca21f7f220e6492f229a737d4fade7f42b8c9b9e7ad3795195f7d44fed15b691fad7c481469cbb21d9945aada
SSDEEP 192:LRBcBhYL5nUbkGKv7hpd3PRpwqn/AJPBApwJiqJFi95Hsb+WNcruk4ZMXWEqGW1F:LRBmhW9iG9LX5rwXMX4FW6aoyE
TLSH
T13462C86BB51016BB5DDAD229F9227B1BE3F6102136D01D84FBFC8A1C16D76CC211745B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 5ac42fd8d8f8776b04e3f08eccf1597a090ce87dd6aa486f3b62499dd6c4f10c
MD5 51796d6831f923b2976df2dc0306a28f
SHA1 e07c1387b15f2c467ab38861350a222ff4b8d106
SHA512 05c05bfbc0d2047095f03d87b79ab7990fdd52f854b86572f92ea185358c82bdb4cedfcf9ecf75817254cb09e12be0d2b2c6b5dd4d7a97e6d180474d4934a57e
TLSH
T124B0128080416152C04606B01346148873185F1CD60A170293E0A962CC39561801C090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a1c9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a1c9.TMP
Size 96B
SHA256 39d84d7f796c81c8285df36218f6c358e6cb68834d84103758f0e3fb446d1b9d
MD5 8c50c957bcb289f0a2627cb72208ce1e
SHA1 0905d575214d575b5fe4b36fc337a9964f3aeba9
SHA512 35039d3fe59a4876156232c0aca336a97a4b09e104bcbb571d906d369324b182a509717e4a9198f07451406b5cd1c93b9550ed088aad372b707c88f13b23eb66
TLSH
T133B00255D193621BD08243B037DD9DDC7A60EF69C603922292E41A67DC29A716526660
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 cb4427d4625f9d9d411806d6aa5bf6b450e1bd4fbefa695a7312024b8947240b
MD5 95d7b810e4ab1fdabe42863311703934
SHA1 8ce0e64974e0c5c93eb84e65fc4aa78d756ba786
SHA512 5b312f2dc71634be09d6583d9695728ceda88e5f15cc77882151c7870f4fe729e2ca6ef0feba9ff8031140d1ae5ef1222158b9c690693c795777430f7725998a
TLSH
T1A7A0022055C05C31DD5453F714FD9542A7247A172219CB0F60EB285CCEA2589615D553
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 150B
SHA256 31149aa4e9cad39d8356c3396b2a1d92ef34067bca23fb330741f138b8c3dd4c
MD5 7039c358395aa6c4e9a8f2632264e7f5
SHA1 76b15161f94288c5a96cf41f75ab43a278217f45
SHA512 7f6543aabd19dc0c6a514fc81f7919a4c8218bebc605d611618ffc0036098f7aa054a24010a107b8507536e8ce863daffbe31b377fdf67189daa61d6e4e481b5
TLSH
T119C08CD32800428B4A309AC81028322EE00B424C8CC8CCEC900801062174B234413678
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58e79c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe58e79c.TMP
Size 157B
SHA256 c41817d13bb6bc84405fc30f8fdd23e9c55e9bdcfd1706fe8c414cd8288e4633
MD5 b622de6228af8fd0a45494b4d8946287
SHA1 2cbcc2ec1f766164df9c8c0e9d0938b5257f780e
SHA512 6095ef54b0d020c3170cb8d218f631af9ffed243f6980c6e9e89b7d450053e8c751627216f5302d52089c808a361386fc11f7887f125ed87701b42b74346cd30
TLSH
T1E0C08CD3291002CB8B3095C81028321EE4174E4C8CC8CCEC900830062134A2384176B8
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 ee6e14be4bedc27654a6b4c007327d7c831440007215c55e902476dcc349c216
MD5 9b6036ae71c71532fc2099d905dc7705
SHA1 cf840b4517990e19527d721c47ebf7c83e0d4e59
SHA512 6f58e06f2df351f6f511cf5c09d52b2cce68562d6272bdf114c8a75ea43fe06f7bac0749eff3ff3d62cf6a1184d3ce8677e635cb67ecc3ff337d4bc6c440db03
SSDEEP 1536:G8CyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:hQqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1B0C30237EFC21E339DC2DB64BA130FDB93B64499D034D301EA7D2BAB699345564824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3dc19fccc8f434e383eb2fa23e1dbf92bc66752566683c67d84fdd0e9bc02f79
MD5 bc828d65a848f45641199b0ed667874c
SHA1 fa76d4a806b59f9371e8afdbcca45e9c1cc63e8e
SHA512 9643ce5e0977e96934a1b17d0613bc89f11c076af084dc522d7aa7796f8638ce13bbb355b079b873b30a7b3d59e049355a5d3084f964f0f82d3ececba279d56d
SSDEEP 1536:mKCyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:7Qqfd7NtZL8cHQRZEQ6Sps9
TLSH
T122C30237EFC21F335DC2DB60BA130FDB93B644999034D301EA7D6BAB699345564824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2936261092f7d68ba4c2be2cd8de210b21b0045ca042f22ccbcffead77c500a7
MD5 f44eb5ad0c90a1b7cc3762c6ffb0d79b
SHA1 d7c593506161805dc1a3e69cdd3ad4aa7025b5af
SHA512 b902ab30cb331d154ee897f777b8ff59b3e58445df22dfe541cfe756ad5d613e9a246c76b49e5c38f69d39bfe86cb70e677ac7068c2c9cb828c3ca9240e717a4
SSDEEP 1536:m8CyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:BQqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1C9C30237EFC21F335DC2DB60BA130FDB97B644999034D301EA7D2BAB699345564824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b9985ff78f7601466dd5664ef2ea5e74c424e3764dfefa5f1906a4477588f083
MD5 543927ac7abcdd0269056219f09a4907
SHA1 676804e238a2ab8cd9526105ae012a17c919464a
SHA512 bf2ba3e3e9626af367b66c032a28c30976b5b94efa90fd4cc0b25f6f86dc3dc449e91d9363d188a496553134931f6446f5ec342fa56855089f11d1ef55cad8c5
SSDEEP 1536:6VyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:uqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1CAC30237EBC25F339D82CB647A534FDA97B644A99030D301AABD3BFB6C93451644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8085634fbe3c83b669395f1785a9eedc929a0c5df783e810408e42bdefb2c4fa
MD5 8f76149bc3b5950f042c3bdabca640fe
SHA1 b64b8edfe6e3521e37051a540963244fbe2e2360
SHA512 188521eb300d1fbf23528b8832e1c98f7298915e574b69539ff125009a5e36e1a60523daa39fa8ab71c4065036ab7b12b5e9e922e365f47d4bf46d6dd997870b
SSDEEP 1536:mWJyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:DHqfd7NtZL8cHQRZEQ6Sps9
TLSH
T12AC30237ABC21E335DD2DB70BA130FD797B644A99034D301ABBD2BFB698345564824AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 343d4a5d01f8abd5df5ea2e4efc61d6bd7fa5bfc024cc55b70568a0027a6d943
MD5 ca726a751fb9ad5827f97b7823ae8d4f
SHA1 2660318107f29b05063c69478269294370cff5ef
SHA512 62a734415d09e907e9f5832aac60db800251431f2702ef01c37a88c4869de7a76c3982f91f6f7a78bd23bc2e148cda62a3cc9aa4cb19585d91a97e0ef4bdd42b
SSDEEP 1536:BWJyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:YHqfd7NtZL8cHQRZEQ6Sps9
TLSH
T131C30237ABC21E335DD2DB70BA130FDB97B644A99034D301ABBD2BFB6983455648249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download