f083390af60752dcf9b99f7aba50d26ad0e6889ab94744a6b7abfc272545f760

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
166s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tenor.png
Size 61KB
Sample260706-tk67jsds7k
SHA256 f083390af60752dcf9b99f7aba50d26ad0e6889ab94744a6b7abfc272545f760
MD5 c3ee5706018db714e699795a54679095
SHA1 6ad230442dc435d1c95ef662c378ff52f040eae5
SHA512 fb845d6b0e192932258cf70c46239eaada4cd73c648530b431e50bfa03495b16a9977af6f661c944a21a3645e33f9d86a8155fa8cdfb3f7e313066a51df035c6
SSDEEP 1536:I5IYRzYYiW4vcdrBL3S6NJFfTa8626yusBWHw4t8GLUypk6YA:I36A4EdBLbFfTfF/e8G4yL
TLSH
T19553024984018E3DFB94D8D6ED1B19B45233D3DFA916B9FB0BC889A89046EF74B11E1C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Signatures

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	187	https://www.fapcat.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a16fe08929f83075	5

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
960	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278277186858902"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{8485D57E-0108-4AC3-BE2D-57BBB57AEA2C}	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4108	mspaint.exe
4108	mspaint.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe
Token: SeShutdownPrivilege	4332	chrome.exe
Token: SeCreatePagefilePrivilege	4332	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe

Suspicious use of SendNotifyMessage 36 IoCs

pid	Process
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe
4332	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4108	mspaint.exe
4108	mspaint.exe
4108	mspaint.exe
4108	mspaint.exe

Suspicious use of WriteProcessMemory 56 IoCs

description	pid	Process	procid_target
PID 4332 wrote to memory of 1976	4332	chrome.exe	90
PID 4332 wrote to memory of 556	4332	chrome.exe	91
PID 4332 wrote to memory of 556	4332	chrome.exe	91
PID 4332 wrote to memory of 960	4332	chrome.exe	92
PID 4332 wrote to memory of 2972	4332	chrome.exe	94
PID 4332 wrote to memory of 2972	4332	chrome.exe	94
PID 4332 wrote to memory of 1268	4332	chrome.exe	95
PID 4332 wrote to memory of 1268	4332	chrome.exe	95
PID 4332 wrote to memory of 3620	4332	chrome.exe	96
PID 4332 wrote to memory of 3620	4332	chrome.exe	96
PID 4332 wrote to memory of 2408	4332	chrome.exe	97
PID 4332 wrote to memory of 2408	4332	chrome.exe	97
PID 4332 wrote to memory of 4168	4332	chrome.exe	99
PID 4332 wrote to memory of 4168	4332	chrome.exe	99
PID 4332 wrote to memory of 2724	4332	chrome.exe	101
PID 4332 wrote to memory of 2724	4332	chrome.exe	101
PID 4332 wrote to memory of 1032	4332	chrome.exe	102
PID 4332 wrote to memory of 1032	4332	chrome.exe	102
PID 4332 wrote to memory of 4020	4332	chrome.exe	104
PID 4332 wrote to memory of 2668	4332	chrome.exe	108
PID 4332 wrote to memory of 2668	4332	chrome.exe	108
PID 4332 wrote to memory of 3208	4332	chrome.exe	109
PID 4332 wrote to memory of 3208	4332	chrome.exe	109
PID 4332 wrote to memory of 756	4332	chrome.exe	111
PID 4332 wrote to memory of 3820	4332	chrome.exe	112
PID 4332 wrote to memory of 2800	4332	chrome.exe	113
PID 4332 wrote to memory of 3984	4332	chrome.exe	120
PID 4332 wrote to memory of 3984	4332	chrome.exe	120
PID 4332 wrote to memory of 3868	4332	chrome.exe	121
PID 4332 wrote to memory of 3868	4332	chrome.exe	121
PID 4332 wrote to memory of 2668	4332	chrome.exe	122
PID 4332 wrote to memory of 2668	4332	chrome.exe	122
PID 4332 wrote to memory of 4184	4332	chrome.exe	123
PID 4332 wrote to memory of 4184	4332	chrome.exe	123
PID 4332 wrote to memory of 1984	4332	chrome.exe	124
PID 4332 wrote to memory of 1984	4332	chrome.exe	124
PID 4332 wrote to memory of 3280	4332	chrome.exe	125
PID 4332 wrote to memory of 3280	4332	chrome.exe	125
PID 4332 wrote to memory of 2996	4332	chrome.exe	126
PID 4332 wrote to memory of 2996	4332	chrome.exe	126
PID 4332 wrote to memory of 4916	4332	chrome.exe	128
PID 4332 wrote to memory of 4916	4332	chrome.exe	128
PID 4332 wrote to memory of 2020	4332	chrome.exe	129
PID 4332 wrote to memory of 2020	4332	chrome.exe	129
PID 4332 wrote to memory of 4748	4332	chrome.exe	130
PID 4332 wrote to memory of 4208	4332	chrome.exe	131
PID 4332 wrote to memory of 4208	4332	chrome.exe	131
PID 4332 wrote to memory of 1312	4332	chrome.exe	132
PID 4332 wrote to memory of 1312	4332	chrome.exe	132
PID 4332 wrote to memory of 5400	4332	chrome.exe	133
PID 4332 wrote to memory of 5408	4332	chrome.exe	134
PID 4332 wrote to memory of 5400	4332	chrome.exe	133
PID 4332 wrote to memory of 6140	4332	chrome.exe	135
PID 4332 wrote to memory of 6140	4332	chrome.exe	135
PID 4332 wrote to memory of 5012	4332	chrome.exe	136
PID 4332 wrote to memory of 5012	4332	chrome.exe	136

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\tenor.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:4536

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff910bfc728,0x7ff910bfc734,0x7ff910bfc740
  2⤵
  PID:1976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,6531290729822108454,17134286590280389688,262144 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,1020845269929960291,10439692545005277266,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2468,i,3328076333353791483,5246014389790825654,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2432 /prefetch:8
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3096,i,14388787882236164732,14796455581958371164,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2680,i,15444027383986382315,12517248627788098390,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4440,i,3035268055873850041,12222955013217367215,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:2
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,5741026195499083715,567532413402148238,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,2689757249300018035,9422016941614676571,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4888 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5032,i,6036858975659813550,1373712293995196902,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,10049753975766242641,3415663026822334139,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5992,i,16545553543534806092,7258151966993751516,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3128,i,2196754561813081266,844740892270294548,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6072,i,735932989962980784,17817700489421086781,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,12659258796873388439,6964054291145218637,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6048,i,3630207422966890282,216443424397358246,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4552,i,8449395715860013526,1120745226151764681,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5900,i,2781868190497696642,4347871772004074968,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6076,i,15170079277800464136,8891951750887963951,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5848,i,5082413712551246326,7326984041866011723,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5872,i,14106976101823938228,8934085488959975154,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5896,i,8565454258426839401,8800272577639343410,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5556,i,7142150281454965463,15151904755661794290,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4480,i,16897030539408448740,4572012508427614118,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6296,i,7343305504732127201,14967233292576807153,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5536,i,5502387768698085289,17686582517647189977,262144 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3608,i,8224021018462287475,14365674934099093776,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4500,i,301831192462323383,11609211669446401568,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6096,i,12008796548404473815,11134914077529682142,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:5400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3592,i,12876990908919851463,12860850663971355683,524288 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3096,i,7619180184539220311,2249832865747779225,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6372,i,7804153304461128867,4908462704644026467,2097152 --field-trial-handle=2052,i,10802293305508065652,335281221154052336,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:5012

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2008

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 77bcdb2c3160a7fd4141144587938963255d18e2280ca048bae35e2b889daae1
MD5 f444c4b91d48467daad7fc304bf0b2b7
SHA1 0a54e0644c006f7b684b802915a76b0b9e907f2e
SHA512 954788cc6221a65dba3cd53452e7ffe912bdce7b20bd8cf2525ecbc1a2e6c0ba3448dfbcc8997d4347508beecb9ddb77704805450cb4090f76ac02aea569ca9f
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 699f58cf4356edfc43cdd2e9a4ced06947283a0ffffa00800550a26bc4ec2fa6
MD5 a2135c0282b43195ce48b5bd9df661dc
SHA1 f6d670e07f176934d2c1aca8f82b73164a832b57
SHA512 67c574e72ab2cdbe9b93c43d692f311ecf1624554af7c22c582bdf55c783cfb18f3974a6796cbd2fa29daba0bfb65263daf3f091f7eba8f5b5628ffed9e582e3
TLSH
T115E02BA6C821DC3B2CFD07186096474AEA5513562F81891F3B3DC30C4FB562A4186C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00003f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
Size 44KB
SHA256 b6756bdcf9f30ebb629f3dcb64812adbccbc2d799cf6dd8846b4749860814093
MD5 4ac2a6677053d9ecf4cd24a1e4d2955f
SHA1 61c6193d5f955303a21e17fd2ddcb3c863d815bf
SHA512 1a162080ad12c85c3d326462608373af833d2d557885b8d3fd265f9976dfeeac14ae8c4c2b3825424f0234de17569aca2ecadecfddaf2b67d53a8a93c0f2691f
SSDEEP 768:WlweAIG1bJTOCDBaVt1aCp9oGkxIklhv3ZwL8THyeA+c0vhWQf4tbgC:W/Cw38sK5lhvzy034tbt
TLSH
T1F523022B2C330B90DC3846FC1952E7B2944BD032E061966CFAD9495BDED03825BDA26F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000040

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040
Size 57KB
SHA256 3e136bf3b5c3917bae4376656f71eeffeb6fd29cd1cc73419856fdaaadcc0d81
MD5 bfa1ee69a98b909087ab9be94fe7d8f3
SHA1 b11fa230ef071e8b743006e2f9d71cb951abb04f
SHA512 a1728dc4029839f62ca094b541fe31e2f8b90c9344a5a6777107b6f25d9889a232526c7447ca004ba217c2cdad6fad66fda6d06346b64ffe30ae660848339a02
SSDEEP 768:8t7OFpcOorhupvQl5JpsU7Rc+W8WC6VvcIffTCpAchIpoafUNAqDqLeUrbq:8tGc9rQybvswtOFn2pvIaAqDqLZ6
TLSH
T1EE430230C968E506C8607B3218F32F499642579FF9336BD37D0891CBC84799A9D3467A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051
Size 374KB
SHA256 9e58eef4c759e0f11538b7483cf06db0eee77e2f759477f430c0a0336baa7e5c
MD5 26636c6b0f19d3f091c8f9eaf16988a6
SHA1 301472ed6eb13e36e86ce7a9c30ca1158b1ff632
SHA512 b9377375bc95d52ec1615f5d87694ac9a7b9d19099630410ef159823fc8a31e2d6ebb8fa6242dfad2e8a0df673616604d0812d0574be8e0bb281935a1f3996d3
SSDEEP 6144:2MWU4MrvT1tBu/ARRfkKGM32RzlqKs/LXaMhXrO7ugO1KeiTxttKWK:BWYrvT1tBu/4GKNgRqKs/LqMhbO7j7er
TLSH
T13A8423DDA074E58D2A056560AB2DAF05B1FB435ACDD8A390CAF1BCB0FDC80F6E55842D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000053
Size 307KB
SHA256 629d93457ca4561e5a8e01223be4df9b6fa445f2ebf3a3e3942eff87a8eead32
MD5 cc9a43a0267ec62a1730372b69eea9bb
SHA1 a580cdaa8144588f505b2683de4f6190c70e96e0
SHA512 de91def564f6e318531802a872242d7b445dbc62c1934a2129d372d4b03e612563c00c4d75f4cf2f96f392af6433be890c836ceb407929fbd7bf8fc9fdab8027
SSDEEP 6144:y5Zah4p/LlwWRf5MU56Yfa5zqakGLzqLj4Xh7+clq105+b:gah4ZLCIf56jzqTWeP4X/qG4
TLSH
T1856423D2B34E8B58ED7F5A75D8523A18353CC941FD23E22F05CB42522643C976A8CAF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000093
Size 61KB
SHA256 6efd360eb6ae255a0e86e69b8a4b6805a8a43955eab2d33979ec8a84f1deef18
MD5 00f72a5482bdf8dc3c5cdd86a3163674
SHA1 d42aab409d45a023996df3975d3d4e3fb96ab446
SHA512 535d5ce8b08f6bb68af04d5c0837618ae54cdd1bfb1a927c6605ce5f59badb9cce87795eb0f37ffb28d7381d185595e79e376d387f44f1aaea96b105b20eab84
SSDEEP 1536:EaSBTaaCPhsGBb/l0AMqJURDktK6QCZkws52:n0TWFlO9BCZr
TLSH
T10753129F13B5F0FC69B1D6C633E6BCBE721090322D9890C6D6BB587A8107871A978D35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000094
Size 59KB
SHA256 a17a1d54d9ec6b27860250da92d3561c6057843b14be09ee5c4e616baec50996
MD5 0edfe1b77af041c891483c57e089c741
SHA1 5bcc947af4122f8fd89d6e06f078e19660a1cf59
SHA512 b28b731ee2cab94f02036375cc4ca1e2c2c5ddfaea5b98b1d354045884981eec51d1fab87bb7d364ca6c70695e45f32c6b0e740f149969988658678efde8f249
SSDEEP 1536:L4DDLcX8Jjx/6RURmG+swjrZg+1L4zOyFeDdhS+U:EcsJJ6Rs5KjXMrUTfU
TLSH
T1BF530231057F1FB22E3F5C976B260C2DDA886D5524DA539D79B0C98E9081ADBC0707DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000095
Size 69KB
SHA256 16bd9ba83369458c15802cc7df8a018514663c40836022eba8fa4e619d62bd66
MD5 8ac750fb6ade4d930125663ea212c120
SHA1 f8917cde749d173b2c74e0cbd04092a66894206c
SHA512 a10fc33c72eaa360c1f32865ff78737a1c59b156dfe9436cb3eee7d7dde7978ec64c5b3499673d68c757e7010ae1e2ce508d16ca719dfdf0e8aa2b2b5c60de76
SSDEEP 1536:VTEJEoY3rYJP+tbQ0UBZU82VaHAfTjaerAA1yeMEUU69TmyeG725:Y9Y7Y1smUBVnTV81EU19EG725
TLSH
T1B1630286F675B9A632579F32EDE044874021C76D7A3E5EB31029818343E39660FCDF6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f01665140810ee9ffec39ed3a0f1a95db72fdf8f888f531148923fc0cfe3aad
MD5 f71c3a3e913522d78df19f021255e69d
SHA1 6d8342359edf93d6a9cf2ce19689d5f33098a622
SHA512 95b9f9cb670f5b36a006b702d4038ce6a0639d84dbc2cf303bae20a1df489ee5c0f76d8dba7c92d44c512caef61bcfd8fe90d19c369a44284609a612b240160b
TLSH
T1DD51B75A43F08FE2FF2A8D7011E95E983076640635637F2549915C3EEE0B3D36499A8C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 d99279146de011c07f7cbd64043372f0ffeb6d34cc19c0aa7a7607baf618774e
MD5 fe35cc8124fd491dee32e2051ad94a2e
SHA1 4ef5d108ce8a4f72a8d886c965c7d6d0b286920b
SHA512 95ee085a9108213ad7c473e47100e1e5206d1f6cf5f7c136375d8fa69fe79680ecfd5821dece5ae4b321673a9257f1b004ce4f2189fe83afe5e9684576452e50
TLSH
T14C31AB2D87704FD2FB294EB014EA0D94313BB41B65037F524A409C3EDE9B3A24048BC8
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 d70188a61ea15d68ca9d205136cb8e22d6ab758bf0a0ea456247d32305073eb4
MD5 dd2237c6e412a99ad3e336cb7e7244d1
SHA1 aae061799104ade6496fd887bbdc2636580bf41a
SHA512 1e6c2c193bcd486d7d315810f7893ad6252a71f7894d76c8557ad9680178aa9e9783f3fd7ac2202b1e4f7edbc06433382cc53a3557870fbcd0ddc62c4631a663
SSDEEP 384:DgIpGhmQ3vjWIu9eDGbEp/aItjER5eK9tNuOnGm3+V51SGVSLGbfh3ebI5WeWEPv:7PGtZkf8
TLSH
T1B35280F3C3D8866DD81552F8A7246E2BCE291914533C3D27C8D5AF1BA3E25B1E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 dd180b16275ba37ccd034a1a490f30f5a44924c5e08f892b7e43c2415408528c
MD5 4e7c28a4208ce00fd9adfafe63874af8
SHA1 b34ff3df581d59ef952aebaf2fb5e26f95592562
SHA512 4fee1a0d7bd2897831cde60844b01c86455f2c3249172f8b10e31ee74ee4664972bf3eed4b525ec72eab29ea64152cecc3b16cf37465d9606da3394ca04aab04
SSDEEP 384:DgIpGhmQ3vjWIu9eDGbEpbYpijpvpLpRQpuaItjER5eK9tNFnGm3dAGVSLGbfh3F:tqR1MxFGEZkfqUOg9J6V5/NwXAs05
TLSH
T10D828FF3C3E8862DD81156F4A7286E2BCE290914533C3D66C8D5BF4BA3E2571E24174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 26557f51c8ccdc31ab7ace75bf7f3014fb5efdb7eb9565763cfeb35c83bf35ac
MD5 97f72b1880994d4de8777a63dd764491
SHA1 8383cd9dfd168bc09e7968ec11484df411d3aa02
SHA512 3e33a46fb15f5db9ccb688858f4e2f125acc9bdd4825006cc77f83243615a217acc4114e27e3585a8d8e1e97a6bf17ea13325d87a4301bf96aa9aba814cbff59
SSDEEP 192:5R0cBzuL/+Su6Qv7hpAPRp2Hop95Hsb+WNnGQ4mA2INcxSg+VyIsnAUgtaJ:5R0mzYRM9UXdrwXS2kFg28
TLSH
T14052F92EB910AA7B5CCBD21AFD227B17D7F6106126E42E84E6FC8A1C15EB5CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 d4504bab28b11ac8b8e996ac8e06e404e3322596acec4fcf8155076d9e08061a
MD5 3f175792a4b3e5e3f53a89fbef801e09
SHA1 035642e9cf33c27ec2faee53f752b0329ad78d23
SHA512 a06d62f8e1f048ac48ae2a51bbee1f3a738d1e818154e6ca5b56732df40179fe1b86d7d74b12effab4d47a4983b1df700999771e2f4e2294e6240b12cc8766df
SSDEEP 192:5RHpcBzuLT+SuG9Nv7kpCPRpcoP++YTDjkecZIy95Hsb+WNKNvBvHFdSoFI+eS/P:5RHpmzYhtgmXzrww5vl0leGAKoTbg5e
TLSH
T13D72B85BA5205ABB8DD7D226F811B71BD3FA246127E05D84E6FCCE1C15EBACC2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 47d2b26c96268a031d1b44697ba491ff254358db3a64fbc08ae42e0c101b89c1
MD5 f896b965a4ebb1a88b84de419c441ff8
SHA1 3d4e3b3a2ac45d5b6958f3c80715f062d02cd9b4
SHA512 f98804e5680db5a06f947e8dec440f2842543b96b7c46080a0578c626cb141480b05329f1b798ab936ecedea9d951afd66a86acc491a95933a3af7f6c075b0ef
SSDEEP 192:5RHpcBzuLT+SuG9hv7kpCPRpcoP++ETDjktcZIy95Hsb+WNKNvBvHFdSoFI+eLGS:5RHpmzYhxgmXUrww5vl0lbGAKoTbg5e
TLSH
T18672B85BB5205ABB8DDBD226F811B71BD3FA246126E05D84E6FCCE1C15EBACC2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 1d448d9890c9bb37ac24cf0087a18ec7e6ff1a28396ce7a64c5c3395bd5f322f
MD5 60d1b9a65baca562f74c92583f8de9a5
SHA1 fd7400450e4e6e2412b626319da37dabb9f41d17
SHA512 c3041d0046709666ad21398066a21f47b625cef1731e460636f638a9432773501de92bbeaccab7e83c12d86d36f6bd51d4fa86ac1d42d14d0c8d22a7a70602b7
SSDEEP 192:5RHpcBzuLT+SuG9Qv7hpCPRpc++sETDjaic295Hsb+WNKNvBvHFVwKeLGQ4dV14I:5RHpmzYhM9mXQrww5vlOPb2JoCbg5e
TLSH
T18172C95BB5205ABB8DDBD216F811B71BD3FA246126E05D84E6FCCE1C15EB6CC2207417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f2548c9ba0ec4e13a19829d49831814726b269080ba375939445194a2fc634ae
MD5 79ecb851bfd0ba417ace43cf42996a80
SHA1 c9f83da6c59315c663df6cd6fc4c42cee6609306
SHA512 217d62d7ffda44e5c4f36414ffb819d69ef1646d0f27b508a6af5f783bdce92bde79ec919c7ab354f2e55d0306cba41221e1312361309ca6550bb3250a18b1fa
SSDEEP 192:5R0cBzuLT+Su6Qv7hpAPRp2+oETtug95Hsb+WNeVLGQ4mANoG2oRNcx4g+8yIsnB:5R0mzYtM9UX/rwYbSV2MHg5e
TLSH
T14252E92FB5109A7B5CDBD21AF822771BD7F6106126E42E84E6FC8A1C15EB6CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 c09d80dc7ec3259ef462d3c4820f3ed6349c68925ea64a5cf366294222e032fd
MD5 ded4c4ce611d4d8fdc02e40fcc32e979
SHA1 022b71715aca010ac1facc628f946b767db89d60
SHA512 946b51abde96c9b672da41b774271c1822f113bacab623699a142e0deefe0dfadd170089ce506d4faa7b4487d38411b34782c0ed97741ada385bb902a45fe9f5
TLSH
T15CB01261C0017701D08226F4318228AC71245F15DE0A170143F0AD26CD261B28015051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a728.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a728.TMP
Size 96B
SHA256 279f5c3f5b88a34b64db979583ae73a6e4523133ed5de436d863063037430538
MD5 a765e9ec19968730c1b55563af4c76a2
SHA1 e54cfe54c47bcb4ec202582dbcbfe327211394eb
SHA512 e9f8a3336051b55d2aacc117de9304de576cffc33d74c2f29963d22b6bde4c2408ddda399b9964ccd0d211c6f8f4f63bfc92d8aec528db0e898b37321bd501dc
TLSH
T136B02280C0822302C00203F233C080E830B0CF20CF03030383E03B22CC282320030020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 9353f18cd50b7928980874e458e102a2b2efab6a2e396fa118b01573a966200b
MD5 7fb3d99c8b0206cfd919b2dcce9a0955
SHA1 5353110857b7f8bb824d294e3ca91c4f9972de38
SHA512 d327f6c033ad2efb90225c674990792fbcffdf7eb92d399e9ba1ac1a6a234d8b1770ed9e2dfbe1fc5257307d8cb005dab860ab3981a0370f64dc3ad3b3f34702
TLSH
T10FA0022015D01D45EC1C42F013A286C1332558102701C38347F3494588A31475111710
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 1f33191576304f0ce251f64b01581fcbfdfa0ad52d81c0df84d4ddce6dca1934
MD5 68086e707b0703e0fef022eef73784ee
SHA1 97b98fa36613e75cf05fba2640f4915c2e0d4cfd
SHA512 776987c5c14c57f61b7626a39c4fd1c388b6d5cbc5caeb449fb48f6fbc5bc2eae654ca07576c30917e82fcb100d2812666315eb84c3f19d4e9c48f0afaf16843
SSDEEP 6144:w8L1kkk0anFe1OPdVbZ/yloO24qZ/ZLW3Exf:JxktByWt4qZ/piQf
TLSH
T15E341372DFD31A370F94FE61B9035E9E4DF4C497C570E604DE382FDB24965886A029A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ae0f4d7f75ba99414d3a451583dc6973e55aaf93916dca1f1816d7c7a7b27728
MD5 71a360fc1e96853d733702dc9adce9e3
SHA1 0a4d7b61711c478fddd5e5bfeadc652c4df130e8
SHA512 85164877cd801e7bc5ab2994469179d2631c337dd7a485ff80a742810773b463fbbd8744997c6750a93f82c78e4b6f82c857700971a3ed34ccf58fbd2918f5dc
SSDEEP 1536:6syD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Xqfd7NtZL8cHQRZEQ6Sps9
TLSH
T1EFC30237EBC25F339D82CB64BA534FDA97B644A99030D301AABD3BFB6C93451644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 f089de156bb8cabe7137ec0e2a73363acc5a7f0f5b2564b6bc53ffdb93eb319d
MD5 9d59324afe1917c45ba5b188c33fdb5c
SHA1 41cd4ff82bef5bc2f4b96443966e5d0b5b5155e6
SHA512 e0f2f72bccec7adfee06344501f4485c0a0e9c30e1df2916fb839e09cc28343602f22a39b17c4d4e6edd7b087caa63609656f0dcf7bd40cbba297dc9c710c524
SSDEEP 6144:bL1kkk0anFe1OPdVbZ/yloO24qZ/ZLW3Exf:bxktByWt4qZ/piQf
TLSH
T1D8341272DFD32A370F94FE71FA034D9F85F4C4928570E6059B392FDB25968C866029A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 03f170b67d4f34849a86c14fae03abefcfc2fe087e751b6591143e583a4d614e
MD5 e65148e5afbfab9bba6a06be2ff1a0cb
SHA1 36ecad31d773da629b78b796bba144c6ceb9d3c9
SHA512 d8d7b1e495892371a978a5dfc53c8b98ed65edd869cdc8c20f5069f2cec542157114fdd86e152e05fdec4d209fd7de2439c3548be8f4dab7f0a0184391a185fc
SSDEEP 6144:jL1kkk0anFe1OPdVbZ/yloO24qZ/ZLW3Exf:jxktByWt4qZ/piQf
TLSH
T171341272DFD32A370F94FE71FA034D9F85F4C4928570E6059B392FDB25968C866029A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 1fca47e4c3c31e0ace624c5d9b7c15bc18dc4598748fed9e19a997ab8a74aec5
MD5 270e3252e90925bdb41e42cd27e3865b
SHA1 c3f59f8c2273ef150081b3e33c399a8546e11abe
SHA512 d8e097d458a92926d1c2224af4ab81a1c629ab2f6c2996ea3ea781ed3dcf99bb8a8cde47bed80fffaad1e831079a1890dd14e85cf4ae4b34068d00e5ee11e86a
SSDEEP 6144:I8L1kkk0anFe1OPdVbZ/yloO24qZ/ZLW3Exf:hxktByWt4qZ/piQf
TLSH
T1D9341372DFD31A370F94FE61B9035E9E4DF4C497C570E604DE382FDB24964886A028A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download