b34ae1704e551a5b751fbd2243ebfbb0eb8539871c98c46693756f1e4398dfb0

Analysis

user interaction
yes
max time kernel
150s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jQqCw99fWz.html
Size 303B
Sample260706-ptbpsaa17q
SHA256 b34ae1704e551a5b751fbd2243ebfbb0eb8539871c98c46693756f1e4398dfb0
MD5 af2157dedb18864b50e75d97a62160f9
SHA1 7ee9a9f321c883b83e1a45e96815011d32125b39
SHA512 d096b799d52dd9fc54c01649f291e2e7883f59018bee30572ad71d07eb371010f16c39ff79d743f39a3737d6f2158262302eac1a61eaac4401b2972bb0fd8bf4
TLSH
T1BEE08CE34A999C13527BA690413AB638121700A988C8DCC1C1C566A4AA35B81EA2E034
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
135	456	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
456	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278150296880967"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
2168	chrome.exe
2168	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe
Token: SeShutdownPrivilege	1468	chrome.exe
Token: SeCreatePagefilePrivilege	1468	chrome.exe

Suspicious use of FindShellTrayWindow 45 IoCs

pid	Process
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe
1468	chrome.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1468 wrote to memory of 2128	1468	chrome.exe	85
PID 1468 wrote to memory of 1640	1468	chrome.exe	86
PID 1468 wrote to memory of 1640	1468	chrome.exe	86
PID 1468 wrote to memory of 456	1468	chrome.exe	87
PID 1468 wrote to memory of 3464	1468	chrome.exe	88
PID 1468 wrote to memory of 3464	1468	chrome.exe	88
PID 1468 wrote to memory of 1688	1468	chrome.exe	90
PID 1468 wrote to memory of 1772	1468	chrome.exe	91
PID 1468 wrote to memory of 1688	1468	chrome.exe	90
PID 1468 wrote to memory of 1772	1468	chrome.exe	91
PID 1468 wrote to memory of 4660	1468	chrome.exe	92
PID 1468 wrote to memory of 4660	1468	chrome.exe	92
PID 1468 wrote to memory of 3140	1468	chrome.exe	95
PID 1468 wrote to memory of 3140	1468	chrome.exe	95
PID 1468 wrote to memory of 4952	1468	chrome.exe	100
PID 1468 wrote to memory of 1688	1468	chrome.exe	104
PID 1468 wrote to memory of 1688	1468	chrome.exe	104
PID 1468 wrote to memory of 1744	1468	chrome.exe	107
PID 1468 wrote to memory of 3240	1468	chrome.exe	108
PID 1468 wrote to memory of 436	1468	chrome.exe	109
PID 1468 wrote to memory of 4380	1468	chrome.exe	110
PID 1468 wrote to memory of 4380	1468	chrome.exe	110
PID 1468 wrote to memory of 1712	1468	chrome.exe	112
PID 1468 wrote to memory of 1712	1468	chrome.exe	112
PID 1468 wrote to memory of 3896	1468	chrome.exe	113
PID 1468 wrote to memory of 3896	1468	chrome.exe	113
PID 1468 wrote to memory of 3260	1468	chrome.exe	114
PID 1468 wrote to memory of 3260	1468	chrome.exe	114
PID 1468 wrote to memory of 1144	1468	chrome.exe	115
PID 1468 wrote to memory of 1144	1468	chrome.exe	115
PID 1468 wrote to memory of 2880	1468	chrome.exe	116
PID 1468 wrote to memory of 2880	1468	chrome.exe	116
PID 1468 wrote to memory of 1788	1468	chrome.exe	117
PID 1468 wrote to memory of 1788	1468	chrome.exe	117
PID 1468 wrote to memory of 3816	1468	chrome.exe	118
PID 1468 wrote to memory of 3816	1468	chrome.exe	118
PID 1468 wrote to memory of 4456	1468	chrome.exe	119
PID 1468 wrote to memory of 4456	1468	chrome.exe	119
PID 1468 wrote to memory of 2168	1468	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jQqCw99fWz.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd4106c728,0x7ffd4106c734,0x7ffd4106c740
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,1818975507913063483,17076747249482846666,262144 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,14344411454734844188,12535822735439248828,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2344,i,18418797705036560732,7418869436696978425,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,11391773548560318371,6400329515357786448,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,16997184291146618262,1490457811998670330,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4520,i,12510210197619596145,12959246613524657843,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3912,i,4358590341432626660,2477535262321436833,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,8579377330889731334,1496209967965345576,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3416,i,8098678065108582036,7723905124677923679,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,15786680511624102958,3358903009247157747,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,18344628405987631660,7446169288436510766,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5748,i,8326227583752271535,17862795855797945671,524288 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5796,i,273444531456915347,2935802341252222075,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=1736,i,10617215712766769675,5705319960115394838,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5804,i,3537532535323802368,18005039781647293143,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5836,i,1734052574052878977,4951683214979050215,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5800,i,4674445497183937681,6488695673147367079,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5964,i,15159872181115576465,16335823936774743978,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=728,i,3914203272972645613,13319873636363000025,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5312,i,9912243529982601840,17446468768215039746,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6128,i,163750507485725791,8650852883340128099,2097152 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6232,i,13046750001140559412,9743838111503702137,262144 --field-trial-handle=1976,i,5152231051930096097,13269421838881606054,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2168

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1684

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 724c544aa939af920c87cd56692ce04a78a984d332f6f83b4677d86f17253b8b
MD5 dc9b6506ca84bd0660eaf8627927e151
SHA1 e147f75fc649a120126394128630614454bb6603
SHA512 7ca967ee7458f05bbdd73a6f5cd6351b29d8495dc4f36872da42339078237e8ea47bd28f94d1cb124ec116ed58695cb11594f3e189b39dd06a9d739b26534a86
TLSH
T1EAE02BBADA31EC271CFD476C60440746EA40135B3B81894F3A7CC109CFB5636454581C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 374KB
SHA256 9e58eef4c759e0f11538b7483cf06db0eee77e2f759477f430c0a0336baa7e5c
MD5 26636c6b0f19d3f091c8f9eaf16988a6
SHA1 301472ed6eb13e36e86ce7a9c30ca1158b1ff632
SHA512 b9377375bc95d52ec1615f5d87694ac9a7b9d19099630410ef159823fc8a31e2d6ebb8fa6242dfad2e8a0df673616604d0812d0574be8e0bb281935a1f3996d3
SSDEEP 6144:2MWU4MrvT1tBu/ARRfkKGM32RzlqKs/LXaMhXrO7ugO1KeiTxttKWK:BWYrvT1tBu/4GKNgRqKs/LqMhbO7j7er
TLSH
T13A8423DDA074E58D2A056560AB2DAF05B1FB435ACDD8A390CAF1BCB0FDC80F6E55842D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 e7a6462c009653a0444ba7613728e3df4e302258db68ddd9c0623804e9ff5391
MD5 d98e165636221f2d102728c1a725cfdd
SHA1 0a979aeb6a980f9f6efab502fb62ec78e37d2a9c
SHA512 c06c251959f19dbbecf6406872c2e755f036acaec04ce286b9bdf5092f351d26a0455a6c40018479fd3ef085c04f6af12db47c20fa730ce78dcffc51a5d9c991
TLSH
T1DA018B55139010DBDB10C972B8E28B58707069B76A9F1F57D1D5427D35333D02305249
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 696B
SHA256 6aac86564067cca2723c9c8ed01fe9333480d050d383ddf2090635bd6fd0a1f0
MD5 3a0bde5ebab2229320e5819b141edfad
SHA1 9337dc01f09b39ae821b81998b59fd4633f33339
SHA512 00ebbb2ad997a07a8afe6fea7f8d52394a415face876bc7f022b6ceb8823fb4100be13487b4b5944182a09e5491b21e7f24fabd347faf3fb9d98307717bc5684
TLSH
T108015C99239100DBDB10C97274D79B58B13068776BDF2F53D1D8427539323D1670639D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 8c62c55aeca313ed948f9f5e28b0d2b03d2d2d83bc7c1f5e2d18bc2d95db5d15
MD5 87959a41a5d21955669121a3088ee76d
SHA1 da36e0c6c64804e4191d69a55660c0ec08ec9fa4
SHA512 5ad1e5dc8aa7656b7a3ba23badd1cb5c0355e79d56c3d87ab22955979a6c13c3c836d6527c52539b8a0325cc5c189ea050de3462a022c78d0bb8dfb9f24b5f8e
SSDEEP 192:DnkVdZ9BaIaEdschfAbRwYvp1c3X/4Ojz6XiSP:DkVdZ9BaIaEdschfAbRwYvp1c3X/4Ojo
TLSH
T102D176F3C3E4852E9901A6F4AB252E2EDD690A14171C3C76C9E5AF5B67F1471E20068F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 87894692bc98a5f01b5d596b507c67f6dd94f4ddd1608ecbdacee4439b9d5756
MD5 f3f32f1b16fd69ba18a83ed23aa5d8e0
SHA1 f2b9dd381bb1e2627ce324cebcba580331ca155f
SHA512 09791015b2ffa3031eb37a38c9d1609231aaf171468f459077b0ca9f61cb5c6cc4055baeface7017222b8048127bb870b15f9ad6616723e4756e68cc18e83847
SSDEEP 192:DnkVdZ953aIaEdschfAbRwYvp1c//4PtYaszG8J:DkVdZ953aIaEdschfAbRwYvp1c//4Pt0
TLSH
T1DBE197F3C3E4852ED901A6F4AB252E2FDD690A24071C3C76C9E5AF5B67E1471E20068F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 912e9c4605587c8f5d17344b6334feb5e8c1b75f9d24d9c43fbe36b704181c99
MD5 0a21f57a938016928cefed3264f8fc24
SHA1 c6398880cf730f21dece0ee87ac32fa228f1abe6
SHA512 d47df79afa6419517f36e65443d64f6d66321e6c54e58d48f7712cff3b9ec80a8d1974cff0ca5ac4acbffaae7b50cc97547ef8998f83cdeba8144a311edf60c7
TLSH
T1EC4148B7C7D8897D890156E8A6156F2FCD690E14531C3C1A88D8BE0F93E6876E20059E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c63e8fe63a25aeef3c9e120666f613554b20901e3be5a3b833704bb3a91fa6a2
MD5 4ec091758968f09af629743f84032766
SHA1 2fa3b9171832285e2a11d0c02dca53a7d7d437b1
SHA512 6515c53095a7f0b56c8d2b91a2fc3b0f341d147edd676faa04cf04fa55d22523b90c6951337a36613abe01613dae32434a8e90177e0ab223b30e872d1a9cda00
SSDEEP 192:/RNYSxfdv78pnPRpz6dX9DHsb+WNniCp4Uw/eet2GBvHaoVyIsnAUgE:/RNYSBd4ZXc5wPFwJ2GB/aME
TLSH
T10252D92EA910297B6CDBD319F9657B63E7F6102261D01E90FAFC8A2C15E76CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 addd5ef5293617b072e80dbf894b299776d8e08e6be9a78c263e63f0b8310779
MD5 a62f0da062f81ec5cfdc51f42bee9ff6
SHA1 31ad433dd798b20355844b134e590b3dc2f3cf66
SHA512 bb7f15eb1ce2ce98780cd82398308097b7d092afeb3f3dba94d2100abd7e6199ff16ebfd5050193d5e14af5ce652e5de37d0ba1c28d9817005e4caa558339fb1
SSDEEP 192:/RNYCxfdv78pnPRpz6dX9DHsb+WNniCppg8hVeet2GBvHaoVyIsnAUgE:/RNYCBd4ZXc5wPM8F2GB/aME
TLSH
T12C52D92FA910293B6CDBD319F9657B63E7F6102261901E94FAFC8A2C15E76CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 289edebe9969e3c8d60beb8b4e02277e5e46d34d187d70e75f27e9c2c2aac4ee
MD5 4b0b26e5674a27c6db75c91b8c337014
SHA1 046b540d13e646b18637ada579fe87da01c2d666
SHA512 2959ce2eb825690cb1de7614d76576d85835aa523832b4f315637db7723061a9d1bbc2d8a488723f4906e76fca0ad4d4a3ddf68ea36831ec31912e3d0383d0d3
SSDEEP 192:/RNYSxfFv78pAPRp26dX9DHsb+WNniCP8eet2GBvHaKVyIsnAUge:/RNYSB14UXJ5wPPQ2GB/aKe
TLSH
T18642C82EA920293B6CDBD319FD657B53E7F6102261D01E90EAFC892C15E76CD322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d6c606eef33e51634dd7a56ae0449e863beaf74408bf1ba6422b7e5e238505cd
MD5 ca6f94db8cc953ade85be801be18cba6
SHA1 8844a6c4f709c4d77b88056e0c4ec08ca7b98420
SHA512 2a33549e082b5544d5ffef0cc7be24ddac84a6b6864c93eeb3c8fcc93559c06ab7ed34346a849ee957c336b6961a4e8b293d411ebc46aa286c7b19effd0956f5
SSDEEP 192:/RNYTxfdv78pnPRpz6dX9DHsb+WNniCppg8hVeet2GBvHaoVyIsnAUgE:/RNYTBd4ZXc5wPM8F2GB/aME
TLSH
T1AE52D92FA910293B6CDBD319F9657B63E7F6102261901E90FAFC8A2C11E76CD321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c4935645b6f0f971289150f0b7e4aa029ea78896e0016ba5a2b87d1b73c1498c
MD5 83d6f421e35fe84497a1656c0b94a0aa
SHA1 47e2250042042af83f86f74b95326cb008f6dd46
SHA512 0d8fbfaeb90c233c15706a1f72455bacc2aa0512f30bc305330b84d3bbac875a1493fdb4dc1999a3177cbb150d4ffc80f4f2982c7e3f4dba982e8519d209e6f4
SSDEEP 192:/RNYTxfTv78pnPRpz6dX9DHsb+WNniCpZI20LVeet2GBvHaoVyIsnAUgE:/RNYTBr4ZXc5wPB032GB/aME
TLSH
T1BF52CA2EA9102D376CDBD31DF9657B63E7F6102262901E94E6FC8A2C11E76CD321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 efc57a10f02b6e07c1bf8e48439d37eccb2fcfd54a401a508bdec2ddb6b3ffec
MD5 c970e707b1b8587f8f5558f145924f81
SHA1 a566a796ee11a3e64ca76e845258a2cdc574431d
SHA512 d412d20bf901f6d912f1a47e4c63580c78932eeebd5044fd3f122f25903ec6b78b55fc5a21d1a99b350d32bd9c44f207de435c5125b99ffbc223d08f44a2cc95
SSDEEP 192:/RNYSxfdv78pAPRp26dX9DHsb+WNniCpipQheet2GBvHaKVyIsnAUge:/RNYSBd4UXJ5wPaQP2GB/aKe
TLSH
T19042B92EA920293B6CDBD319FD657753E7F6102261D01E90EAFC892C15EB6CD321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3da4e08-d8e5-49c3-8600-da654142fbc9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f3da4e08-d8e5-49c3-8600-da654142fbc9.tmp
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 128c9e2299cca97a153effaa6f314a70442a0955dd0b6ac97b15f87123507894
MD5 51eff6102bd655d971d953a1139d4814
SHA1 e7ef7d11724564739f13a93e7529c3a70e6293fa
SHA512 f68b2e560c4a5e0fe6b36da2d8ae3b32ad1c419f5f3fa4148a94a54865f8f6359a137d28345a1b0e4d55e7c92e38b5fe1953f13f4f6bf67826257cb255375276
SSDEEP 3072:BjzGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:dKm7Rkm1tYpBeh2BAoO
TLSH
T14EC3123B9C65E8375DB9BB5AB04E0A1F1DF249A7C920DE46C8D45B0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c961cce27b5b9dbf3464c647d717232deb6d3a201f15da0ed981bbb2c40f949b
MD5 8b72484b72928256aaf87cc5550899b8
SHA1 268befbb2bcbabbcf2e7f6f4dcbe6c73fc729769
SHA512 11e66853cd2ed3fe2111ca8b485ece2c14dd1f62948d122eebe5eeb6f2021fcc4c85ccfea03fb2e196e306474391a4bfd745c6d9bfb65bc45ea6b2eff099865f
SSDEEP 3072:kjzGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:0Km7Rkm1tYpBeh2BAoO
TLSH
T174C3123B9C65E8375DB9BB5AB04E0A1F1DF249A7C920DE46C8D46B0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 eb68716dfefe896291ee0927fed148b69609ffcabb6bf4affe9929cc4ba9c6d1
MD5 4b4ba1f74419809f859020fc9d6a14b1
SHA1 9ef43d3e3ab7e4ad040732deda45373231f7c4e6
SHA512 398a294fd19078b5ebc7f6ae420538e9d7a3ce0f3664960f2fda4f83740a832494815e8b92e254b204d22d24b93fd3a2c1378086fff9bdfe9c9922f4714cc859
SSDEEP 3072:L3Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:L2m7Rkm1tYpBeh2BAoO
TLSH
T1A0C3123BAD65E87758B9B71AB08E0A1F1DF149A7C920DE52C8D85B0423FA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 5135ad3579b22a4866144903b8baffa67ace2356c75e4a11695b53011b7422b0
MD5 72b343ae9701ae5263148ebc0fe31f33
SHA1 a8670904d874dfc8c5305227b3d94eae57f3e51d
SHA512 76e331c5e351970dd06e7f21d1ebcae348da01f1dcd5ab38c8c83f132151dfeece991904630bede72128df7dde12220e8bf33a4a338053e7f3bc68cdcfb3f865
SSDEEP 3072:pGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Im7Rkm1tYpBeh2BAoO
TLSH
T119C3123B5D65E9775D78A71EB48E0B1E1EF249A6C930DE4288D86B0433FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 67003e8b7a8bcbf6ad95c2282a197a40ef6db925bbe8bf0eb439774ae8b53727
MD5 9cc4429589a62a328c2f5deb614a4955
SHA1 6d5185a7019784b78a57fb65d8ba96970980200c
SHA512 b0c0df0e33c9c9ea1b10beec328ff822b1101e1d5cd8c0a0179c9b8aa38a7f42b26fda108d6d387987b8e79b7832effd225650749abe2e003825bef176fee631
SSDEEP 3072:W3Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:W2m7Rkm1tYpBeh2BAoO
TLSH
T1E5C31237AD65E87758B9B71AB08E0A1F1DF149A7C920DE52C8D85B0423FA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download