hxxp://syv-velocimetro[.]lv[.]network

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 01:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://syv-velocimetro.lv.network
Sample260708-cdpkgshz5j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
556	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279501044355210"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
1420	chrome.exe
1420	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe
Token: SeShutdownPrivilege	732	chrome.exe
Token: SeCreatePagefilePrivilege	732	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe
732	chrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 732 wrote to memory of 1044	732	chrome.exe	86
PID 732 wrote to memory of 3468	732	chrome.exe	87
PID 732 wrote to memory of 3468	732	chrome.exe	87
PID 732 wrote to memory of 556	732	chrome.exe	88
PID 732 wrote to memory of 1472	732	chrome.exe	89
PID 732 wrote to memory of 1472	732	chrome.exe	89
PID 732 wrote to memory of 2976	732	chrome.exe	91
PID 732 wrote to memory of 4928	732	chrome.exe	92
PID 732 wrote to memory of 2976	732	chrome.exe	91
PID 732 wrote to memory of 4928	732	chrome.exe	92
PID 732 wrote to memory of 5484	732	chrome.exe	93
PID 732 wrote to memory of 5484	732	chrome.exe	93
PID 732 wrote to memory of 6140	732	chrome.exe	94
PID 732 wrote to memory of 6140	732	chrome.exe	94
PID 732 wrote to memory of 552	732	chrome.exe	95
PID 732 wrote to memory of 552	732	chrome.exe	95
PID 732 wrote to memory of 996	732	chrome.exe	97
PID 732 wrote to memory of 1644	732	chrome.exe	103
PID 732 wrote to memory of 1644	732	chrome.exe	103
PID 732 wrote to memory of 1296	732	chrome.exe	104
PID 732 wrote to memory of 1296	732	chrome.exe	104
PID 732 wrote to memory of 6056	732	chrome.exe	107
PID 732 wrote to memory of 5176	732	chrome.exe	108
PID 732 wrote to memory of 2944	732	chrome.exe	109
PID 732 wrote to memory of 5708	732	chrome.exe	114
PID 732 wrote to memory of 5708	732	chrome.exe	114
PID 732 wrote to memory of 5248	732	chrome.exe	118
PID 732 wrote to memory of 5248	732	chrome.exe	118
PID 732 wrote to memory of 4504	732	chrome.exe	119
PID 732 wrote to memory of 4504	732	chrome.exe	119
PID 732 wrote to memory of 2620	732	chrome.exe	121
PID 732 wrote to memory of 2620	732	chrome.exe	121
PID 732 wrote to memory of 1420	732	chrome.exe	124
PID 732 wrote to memory of 3140	732	chrome.exe	125
PID 732 wrote to memory of 3140	732	chrome.exe	125

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://syv-velocimetro.lv.network
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8d65bc728,0x7ff8d65bc734,0x7ff8d65bc740
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,13595846658514623856,9734924826587638705,262144 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,15222638471976738480,11188369146675930718,524288 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,17068219249798733570,4355398652634492840,524288 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3068,i,8689678707911174397,12460518022606330330,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3096 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3084,i,8414158572950123131,12492812432858378674,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4380,i,18444658281315980461,15339708705723045591,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4396 /prefetch:2
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3896,i,501952223416892296,15368057276161411356,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3212,i,3788727179258420435,15807616162619539668,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5968,i,15675582581885438019,16934481437190567340,524288 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4796,i,3368488815762534966,5508168604266969054,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3224,i,6722313138609731398,2613356907575822229,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3376,i,11091323671341204465,7829384266307272787,524288 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3400 /prefetch:8
  2⤵
  PID:6056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3372,i,11293962943158946548,8126797552923485111,524288 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3340 /prefetch:8
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3408,i,13871130949082858435,10523243994309678796,524288 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5784,i,1394823258927925339,6585972994745461346,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4912,i,13266329813050360622,13457546133688560881,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4732,i,18298744997846004306,18305248764872220933,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5872,i,16522625352913591731,1337691050483692120,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6040,i,7646824259951915654,1892018413033038164,262144 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4768,i,13419950108218554178,6673622389049864617,2097152 --field-trial-handle=1928,i,10172610838182817266,8523087041510413921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1144 /prefetch:1
  2⤵
  PID:3140

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5296

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 746661a17dc4fab57f3ac8c2f62fc4d2e9fb627d50e9277efdc5d2b0377f4b54
MD5 c91618360bb23d17cb7c22707bc3eef1
SHA1 567a4e264b0706ce055358327d81907d0b07f179
SHA512 1d3d1651b095d5fe3814dcdc3d8edb075ae27a31e412c0e1db41e8bb7a74602a50bf183b6c506fe42c06d28c753ed41ddd89ae318193c370ee07239ac83254c3
TLSH
T1CEE0E5AAC9629C3729F9071D60501745EA54135B3740548A3A3C86088FB533B4A4685C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3a49c487118fbb2c214164d97a189dd1d93df25bd8c71bb2bf2c6aba75a58f80
MD5 777d2f6a874415cc320421338e75a664
SHA1 0683f17355a200a42334c06ffcb1ec182a9d46b3
SHA512 bd619612469ac6dc784a56ab1bbca3c74a0065d17b6b756044a9ea7dfc84361e5130ab021a069c00fbf0cef557989ebb051d29051433c9953ed59a6e5b5e1bf5
TLSH
T176418AF793B4997E8A1196E4EA15AF1FCE690524031C3CA689D4AE1B83F2872D10078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cb69f8348fd7c09241644d276ecdabd0a63c858fb3e7bb0170a029a5989a5bb8
MD5 f6df3f0b781ff936231f4483ddc317e2
SHA1 a606f63aaf742b2226f90c96dd76046ef1f8bd27
SHA512 4111c166059dd94fbdbfffd51cc4c52258c31addd3740b3e044f87a18c344b2c9981a2ce330d48b9ba73be69b479c2e0487f08060e82cfcd6b6e21e11dfbfdcb
SSDEEP 192:5RKjs3GsCFv71hp37ePRpSbD92HwQ22ub+WNnH6GI/2/NbaY3/VyIsnAUgE:5RKjH1BhFMXYQb22yaF2RagE
TLSH
T14352D62FA820687B6DDBD22AF9167B53D7F1102122E41E84E7FCCA1C15E75CC222791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 4a197c1b43ad0c7a3b625ef03e8f7c9e503b00edcc60a9c5520138f740a962d7
MD5 bc280183736e720c8bf1092d5907c78a
SHA1 ec9c461635a28f092175c63226bd23ffdd4fed9d
SHA512 9402de6a1ed930ae1babc919ee23da937b9a30a2cf4ccbac2f86e8752181861075cc67f39bdbc06b9af090e236e05c51bebda59ceeeebb9046c52d535c69e8b4
SSDEEP 192:5RKjs3GsCfv71hpAPRp2bY92HwXb+WNnH6PwNbaY3QVyIsnAUge:5RKjH3BhUXjQCaPaave
TLSH
T1BB42B52FA910687B6DDBD22AF9253B53D7F5102121E41E84E7FCCA2C15E75CC222B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b7e3bb0fdfbe5f92afe9b568cbefe0e548327b43b0ca238837f4d949f7170321
MD5 21814610c99c652772a23a854fd58121
SHA1 7b55716f584d67c863c82548419f75ceef8e8661
SHA512 b63daea44352dda99a7a9794508653465ac97bbaf23b71ebb807f424db050cd6abc2eda9753a6edfed63d7abbaae1436539e8d52109f12e5ca42e0c701dfc27e
TLSH
T147B01240C0029152C44A02B022832488F1645F10970A170143E06A22EC3B1618014050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ab8d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ab8d.TMP
Size 96B
SHA256 45e5bd98378ecb6912a0d48c4ee158e51f50039b17ce32d3194fe31f80807f0d
MD5 b8b04b5a7b0f67f16479caea62315e4a
SHA1 f52ba9f2fd2e88cd971575bb560f9c57a72954ed
SHA512 d3711a3afe2e5cce7f8bb951bb2f8a96a954e3a39c451be31a99bb82238a2ce2da38096877c3d43253b71327201d7657bb398d3e78a0d51371bd756c56808a26
TLSH
T113B02220C0032202C00203B022C2C8E83220CF20C2230302E2E00B22EC22E328A300A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 57fb65aab924f7a44bdef81ff07cfcd4eaeda474ef6e3a3b6fecc9ff0e4e509c
MD5 ee6c9b62f8e8694f222000beec1dd281
SHA1 4778d2399d6aade6de671932f94d73057e0a6f8c
SHA512 5f799d67c098a59e55d8053d21b548cbf1cf52ae9d73c69d36a9ceedf9b6d6f561050f706ce217502d88cda0e35b48ebdb96c79aaf3d94ba49f6f4c775d8fe53
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:wm7Rkm1tYpBeh2BAo3
TLSH
T1E8C3123B5DB5AC375DB9BB5EB04E0B1F1EF149A6C920DE92C8D45B0423EA7CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d6531c03dd6065a18005f3d10b18645b0d66f6561a3c5975ba485b41087b3db9
MD5 6203e4942f5ce1df6d2ddfdfc533d5f6
SHA1 4b1b51fec013e7c5cadea072120dddc01bb3bd12
SHA512 fe4f50a3e3e016db7bd80501fff9450055cce471f723372d1634ecb89171976bd1f51547acbddd383ae4f895933244f03bd863a0d775f6fa280b52929db847dd
SSDEEP 3072:KGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Nm7Rkm1tYpBeh2BAo3
TLSH
T1CCC3123B5D75A8375DB9BB1EB04E0B1F1EF14AA7C9209E52C8D85B0423EA7CC1A45E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 426623a040d17dd40d3ada9f1c9a3e51694e077d6840a0407a7fc0b7c3653879
MD5 adfaa853a1a6116e633663086dd29bfa
SHA1 2c73b9c834236cb09fcfdb41ae876a53de70a727
SHA512 548e36a1398c098162b4f9d8c79519be47725de4a19b58a2180699a11ce2ecc4a01488b912850878e2c3d0ef502f3806fa4fd40cda9716193f4474ad9094aa6a
SSDEEP 3072:mGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Rm7Rkm1tYpBeh2BAo3
TLSH
T10EC312275E71A9375D79B75EB08E0B1F1EF14AA6C930DE92C8D85B0437EA7CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 85d625fff07685f4094d7fe48b2d60f9c78acd544d04d4f39e974cd3b720772b
MD5 7c10cac225da877f92563b18fbf63a19
SHA1 a0695f181a4c799557ce3fe2231736dae0dd3855
SHA512 7b4e34ef9b5d22c8ac50e900208bfe57047636eb03ee66db7b0b3506e568abbb58737b6cad9efec49c28f6d96f59b4d29b9bc4d5bb88a1b6d70e64327b6b9a35
SSDEEP 3072:eGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:5m7Rkm1tYpBeh2BAo3
TLSH
T12AC3123B5DB5A8375DB5BB5EB04E0B1F1EF149A6C920DE92C8D45B0423EA7CC0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download