893369d00ce747b0adbc281fa9b580c3eb83b9cf80df6a437eb8f03630f449ba

Analysis

user interaction
yes
max time kernel
169s
max time network
170s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/07/2026, 16:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
xxmyu.py
Size 30KB
Sample260708-t5pg8sdy21
SHA256 893369d00ce747b0adbc281fa9b580c3eb83b9cf80df6a437eb8f03630f449ba
MD5 a04a1d1ed6bb4aea1a91fa4cfe2b1d4c
SHA1 a30f26b2ef1a84c05ca5110d96f62e2596a31d84
SHA512 8e2883321086bd9128c350fb8515e559927292270c56a06ca24148f07da592834bb088f8afa5d4ff3849a8b59d1bf57f865362607a8a8d7f3060ba3962926efc
SSDEEP 384:BldTJ+9lyFVNB1C6klEg6p49dcyhzu+vrzkvanOdnbzman805BazKOpNsblnbqYd:ndTYA4l7Jdcyhzu+vse6773blVysQFQR
TLSH
T123D2F10D11966EE4A535475ECFD43FA420DEAFBE8CC9C9465CF5870B22B60935826EF0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1716	chrome.exe
4396	chrome.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Winword.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Winword.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Winword.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280023893132533"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 15 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\ex__auto_file\shell\edit\ = "@C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office16\\oregres.dll,-1"	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\ex__auto_file	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\䤸쀀	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\ex__auto_file\shell\edit	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\ex__auto_file\shell	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\ex__auto_file\shell\edit\command	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.ex_	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\䤸쀀\ = "ex__auto_file"	OpenWith.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\ex__auto_file\shell\edit\command\ = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\Winword.exe\" /n \"%1\""	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.ex_\ = "ex__auto_file"	OpenWith.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
232	Winword.exe
232	Winword.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4296	chrome.exe
4296	chrome.exe
1268	chrome.exe
1268	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4064	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe

Suspicious use of AdjustPrivilegeToken 18 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4296	chrome.exe
Token: SeCreatePagefilePrivilege	4296	chrome.exe
Token: SeShutdownPrivilege	4296	chrome.exe
Token: SeCreatePagefilePrivilege	4296	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe
Token: SeShutdownPrivilege	1268	chrome.exe
Token: SeCreatePagefilePrivilege	1268	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
4296	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe
1268	chrome.exe

Suspicious use of SetWindowsHookEx 20 IoCs

pid	Process
1004	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
4064	OpenWith.exe
232	Winword.exe
232	Winword.exe
232	Winword.exe
232	Winword.exe
232	Winword.exe
232	Winword.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4296 wrote to memory of 5044	4296	chrome.exe	85
PID 4296 wrote to memory of 1272	4296	chrome.exe	86
PID 4296 wrote to memory of 1272	4296	chrome.exe	86
PID 4296 wrote to memory of 1716	4296	chrome.exe	87
PID 4296 wrote to memory of 4140	4296	chrome.exe	88
PID 4296 wrote to memory of 4140	4296	chrome.exe	88
PID 4296 wrote to memory of 4572	4296	chrome.exe	90
PID 4296 wrote to memory of 3208	4296	chrome.exe	91
PID 4296 wrote to memory of 4572	4296	chrome.exe	90
PID 4296 wrote to memory of 3208	4296	chrome.exe	91
PID 4296 wrote to memory of 668	4296	chrome.exe	93
PID 4296 wrote to memory of 668	4296	chrome.exe	93
PID 4296 wrote to memory of 2124	4296	chrome.exe	94
PID 4296 wrote to memory of 2124	4296	chrome.exe	94
PID 4296 wrote to memory of 3300	4296	chrome.exe	95
PID 4064 wrote to memory of 232	4064	OpenWith.exe	107
PID 1268 wrote to memory of 3332	1268	chrome.exe	111
PID 1268 wrote to memory of 3468	1268	chrome.exe	112
PID 1268 wrote to memory of 3468	1268	chrome.exe	112
PID 1268 wrote to memory of 4396	1268	chrome.exe	113
PID 1268 wrote to memory of 2488	1268	chrome.exe	115
PID 1268 wrote to memory of 2488	1268	chrome.exe	115
PID 1268 wrote to memory of 984	1268	chrome.exe	116
PID 1268 wrote to memory of 984	1268	chrome.exe	116
PID 1268 wrote to memory of 3856	1268	chrome.exe	117
PID 1268 wrote to memory of 3856	1268	chrome.exe	117
PID 1268 wrote to memory of 4336	1268	chrome.exe	118
PID 1268 wrote to memory of 4336	1268	chrome.exe	118
PID 1268 wrote to memory of 4704	1268	chrome.exe	119
PID 1268 wrote to memory of 4704	1268	chrome.exe	119
PID 1268 wrote to memory of 2444	1268	chrome.exe	120

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\xxmyu.py
1⤵
- Modifies registry class
PID:1932

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1004

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff53adc728,0x7fff53adc734,0x7fff53adc740
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1596,i,2202256559303699059,12931052902983616460,262144 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:1272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2264,i,17175249816478192577,10936435666566406735,524288 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2308,i,5174544102755147815,17429503759759810957,524288 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2404 /prefetch:13
  2⤵
  PID:4140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3228,i,7745929548938420739,3379809147506564516,2097152 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,11918516564564029370,7020523310752921559,2097152 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4224,i,16567397069033213946,11699004355669954310,2097152 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4276 /prefetch:9
  2⤵
  PID:668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4612,i,8494335026323707235,11291622939696331440,2097152 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5444,i,14683475281666885871,5965766977085897999,524288 --field-trial-handle=2004,i,14160858408465546902,13128228541435236630,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5216 /prefetch:14
  2⤵
  PID:3300

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1432

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:944

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2452

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4064
- C:\Program Files\Microsoft Office\root\Office16\Winword.exe
  "C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\Desktop\EnterNew.ex_"
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of SetWindowsHookEx
  PID:232

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff53adc728,0x7fff53adc734,0x7fff53adc740
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1888,i,6156300285085751640,11874621642517985052,262144 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1876 /prefetch:2
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1988,i,6157168292752564797,12940675089107972918,524288 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2256 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,3440637862311240057,776679927949885321,524288 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2376 /prefetch:13
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3288,i,15756696622427007436,5669757336727649985,2097152 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3532,i,3813530956517271843,13363071532011650262,2097152 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4004,i,5487831491988501933,476176679909187995,2097152 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4740,i,11740807483569417514,13695651678331640179,2097152 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4856,i,2116421550266290459,7442646914093874358,524288 --field-trial-handle=1892,i,8853038905796287169,5096891018868880799,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4916 /prefetch:14
  2⤵
  PID:2444

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
MD5 b0366599d64b0fc1adb2a712dcd02ee1
SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
TLSH
T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 a4ea8b8be1451fe88f812f0e136bf56744968adc22ba72ce7006f3e1e1037807
MD5 ba45f966ea54de57f69c358e0073dc0c
SHA1 667cba6254daad80766aff4069ea5b0a6b4f92be
SHA512 22c53a7139bda25ee80ce9f8c58aac52a8308f7366ea43f91344610f8b8b4acd1cb444d7ee6e647fa4cc932a876a7047c80822fec841ae05822048be846cc281
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5856e96293e9055cec92715263b46036d521c07a5a3aeec6ab1b163e27b1fd1a
MD5 5115e3cf579ea7f1b12a6956605c6f4b
SHA1 2949617af3f98528204ba5e6c32bb199dbc790bc
SHA512 dbdbc3367cb2734abea3bbea3f0549b47f65b8d95fbc691c8fa9f7116f5a35a4023891ad0ff4bfb1f87f3e03ea84a064721b6c3544809140ebf7c1dbfe4a8b16
TLSH
T135E02BAACA11AC2B1DFD075968944B86DE1013A62B50594F3B3D41098FB16364582E1C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 64d1d2ee366a46cb7ab700cf2350050bbc9c871845ec852847b9dd9211879833
MD5 4825d477857e846084ed33db2bacb1d5
SHA1 919f94611920af4d67d01d4db88be6e413a33679
SHA512 bec0a8b8ca61e20fc8056692f57a7fd1e15b2119134f219a9ef5dff2e378dc88c9eb88302ddd79624a338392b0ba96ceab4dc221317ce2ee4cade1edd0577ac7
SSDEEP 3:MsFl9tlGdllnKNHlK6l7/m+E//P7KaqZl5RkE/llZkvLV+hlhlkOllREX:/F3XGYNwV+EXWX4kllivUhlQ9
TLSH
T1D41392BCBB48E733C98F847C580F8BB093B89C24C6420B22326C2A222D7110B914AC00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 1cdcc233ca7c8bb2dfeb4c3b2ca7f13ba31f160c9b25e3f283cfee743f72aea0
MD5 b0d44255a3c0bee05afa7fe6e509c974
SHA1 1c0fc00ce9ff148c187c8697f14d7d371dbe3d6b
SHA512 d65ae2a3ba49d3e9b91559f370519b9694e1e0ca6bb884d8e7a0bab3a3aacccf9f50446a5bfc8ca9ded3b6a14f026a0dd05daa8f8d35eaf154ef28beab01498f
SSDEEP 48:7DTDXM1XgAXBAa+MmXWveRydVEPLVBKWwtl:7DTDXugABAa+jW26VOLHKWol
TLSH
T13F4483F90A0AFEC6E72ADE34BC82C214CF728A221565BF31F275448116520E73424666
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 7f280cd5446d760ba5b371ec7b575da1ef3a02db7d8c4673d40c8e79bdcb90a7
MD5 660f87480c19ef04705d0268915407f1
SHA1 828ade26cb42374a42160d01daf2f5bf0448cda2
SHA512 a00e98d6578752c243521d52155579e4db6ae550ee7df82b4f3d7c19d3cdf061c16ac3a49b5d15774e1108bbd4fe6cca4e42e7d8d2f7acfd5b29b612b24ce697
SSDEEP 384:xp7jy4iuzMS+hiEgYiuzMS+hjl9TniuzMS+h:G4iK4riK4ziK4
TLSH
T1BB161A9B5F68F542E981FEB0FBCDEC2EBC7022D2DC96A442D21681BA44F07C0174559E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DIPS

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DIPS
Size 36KB
SHA256 760bd00a8288fc15e0fe4c3daea295d7e040945108de09e22b98517673260d87
MD5 c6b9c0f81f0d6b071e558d1955038d8d
SHA1 a1fb0aa3aa90754a7448d54219175dd944a9873c
SHA512 55ca62b434abf0c67c4e78e69d8d2cc41b32b94511de1c4688a6a3e00b2866ca963760fb918b0054c41e21546aefdc4f4520d65ba5724798ba30537471c2e953
SSDEEP 48:TJqQq3qhmr/O43b/Y8uaLNW9WjWbfl4pwU1cx2Bt:tCEmrm43b/LuaLNW9WjWbfltxW
TLSH
T109F222078E793C61E4CA873789C18AE70F790758975B6E6859A804615DC2A4880BF0FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG
Size 317B
SHA256 b7511f503fec04df618f6029f4cd85946e90af23e242202c526f49bcc94a1226
MD5 10c9641b764ffdceaf95c112d8c56651
SHA1 8e514efb6cdcff4bd477171dd7fd891e853bb007
SHA512 0e761ae84f6496df4d557b8fc720b1334827a8483ab98680b83a6e228833e25c67e7846e863a375d68fca1a46be35b6c536735e6a43a7b2611fb3f5e3587b60d
TLSH
T1F7E0260436CAC9AD645498BB8269A70CCBD23800F2C83C460705884021E6504A3D16B4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG
Size 327B
SHA256 d4951cf68007f9a1ec87607c03998219cd9a413946095361f2e55f0861d1a49e
MD5 cb3232633d6840f4cff0320259b16c34
SHA1 9479f412760d0752e5254159473b63a2b2ffff02
SHA512 a90e0f7ccfbe83c071b5e6de285929fbb5604bfe21cdfe387e44104819355671a0f3c874485fb7ffb5bcaec794ad9cbcc3d479bac9585ab56352390bc8c29acc
TLSH
T1EFE026063EDACA7E2561805B8628E70CC6D53B1C9ADE19822B006C501082408FBC32B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\LOG
Size 305B
SHA256 27a2bb07cecd53e6069241b36797b35500707121fbe99334ebb501ff881624e8
MD5 d7e52b70d6d16436a8ded94384e680ef
SHA1 4cff0431ac0bf948f68926538007c9e0b489a2dd
SHA512 e559cb410e593245aacdf403614aa162540b1d5531bd76673a3900d3fbed339d4da00b122ebdddcc9e80068dee71b84aa5cdfe83173369ae80eef072af030bc9
TLSH
T11CE0CD8537DAD7BE2555845F0369AB0CCAD93D4CF6DE7C821700585051C6404FBD72E2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 f930c48842e9db6da233f5f147dc3d7b8f410ddd8882302b5aaa28f5731e3aa8
MD5 da116fd1d7a699db1bf6f1efd75db806
SHA1 e209a226c6eaaa814fa3e5c81987c76452300ded
SHA512 85c9e852867f62da6aef63ae9afc1f99fc6647ee32b55b6a568a683854082ba2fe0e51f12b841517d11daf60b1d06c9d6a2730f06cacdfe577331109027c5ff9
TLSH
T15AE0265077CEC67E2505906F82BA7B0CDBF1390CE7CDBAC28B08A840B0C6408EBC16E1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 20KB
SHA256 6c423d328e3d5532d26460118551c45c91d1c7fcb448181d810ef2d286e942e8
MD5 9ca4c6e930523dbd1842e1b4d083614e
SHA1 ac1c06ac8b1916398f7db4c3af7f0c4c8a90d4b7
SHA512 0969741ba0cc69474d1ce5af3ddae40dec7eb155b95c502cd3912d3f47da452f7a8eab8c3406559f3dc034bff6c6040471c5fee6dd98184c03a9e574ff7dcb4a
SSDEEP 24:TL/91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBNd5yOiQw5mt18g89Ve2j:Tb9aw/aHLopFMavU1iBNHridMtag89Vj
TLSH
T18D92428F1F303620C0F48772E9C14AAB2E7C222C9327BD99EE4424B3CDD595BF5150A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cookies-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies-journal
Size 8KB
SHA256 333bf7b072b3a2fdea2dcb1833d692ab773ba9cc07697e4be703bcb8c33f9a88
MD5 502becc2dfbaa8f1386a287988abf498
SHA1 e9ab8a6dedbdc9bcc20ebf8aca4bb6a8aa2ab019
SHA512 c2bfc319c0c006c6cebdada4cd09be266d6ed30aee20f66ea2da88d58f69d24ed48d1767ca740793bc748339abf7788b0c763362398a6475e0b3fe7747263649
SSDEEP 24:Od5yOiQw5mt18g89VeYqL/91kweka6cLbXYFpFNYba5+6UwZ:OHridMtag89VRqb9aw/aHLopFMavUa
TLSH
T1C802FC8E5F307324C0F48772E9C149172D7C222D936B7A99EE4420B3DCD6A6BF5161A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7e8cfbc633484d3ba12e34483e59e8ef9ff6ab87bcf19c99279535bbba0efdcd
MD5 0c56edb5ed77421bd75b40b89c8ce53e
SHA1 2cc44b60a4216054ec07a5ada2480df01b3518a7
SHA512 5108a41664561e73f0b2d3ca2da2c10b9f545b4e50f1a753b9664b78d5a298c8cca4eb8269fba119250b28349b041fb59cd87ff981c445d02121c5f294450ddd
TLSH
T18E2136F71370997E8710D2E4EA15AE1FCE790121131C78B685A46D2743F39A2D10479F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 83ebd11368042d8cab40dae140956c2464f28f2bdd382d26df33598fecebb6a3
MD5 2a7d47926a9c492b0ec73f36fd070d9f
SHA1 26c40b35a7fa6a9e5d7814962af6a542e64c5ca0
SHA512 036d7bc703af08466f842da660ff465936a124dd9c9c50b25bae2bfcb389a735b4309e88ae8060954d02a5d50e1da772c6e413538888d263f828ddcb39568035
TLSH
T15F2136F71370997E8710D2E4EA15AE1FCE790121131C78B685A46D2743F39A2D10479F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 8be4be9c5fb7ed429a3e2453bc37e1da426f04ecd2d9fcb4fca799c03bf6c40f
MD5 96c75a27a0bc27bb389cc85612df23b2
SHA1 3fc132849e559089453f7fdf42db562de8a8338c
SHA512 91014faee5f3c761d16ac934b9bc5fef1437ca3bb17d4c2f12f5a344c4d157b2c8e3ca8c6ac9702438d2b83b11fab4f57c6a82273249aeb648ac54d0d9f80e98
SSDEEP 192:5RRGP1/5MZ0V2v7sBpAPRp2Z9NHsb+WNnHI0XyPyIsnAUge:5RRGd3C8UXerwo0ce
TLSH
T1AA32B51FAA15657BACCBD22AFA227753E7F5102135D02E84D7FC8A2C15EB9CD221341B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 21c2401ec036ab857487f786a4e6fd5ef9ad90f53af224712f4833b4e09bdec1
MD5 50ff5c55a1165b8b05faa91323936e9a
SHA1 e0a474199a0fcdc5e2efd4df4c882b69b67c905e
SHA512 f962f47d95a35b0904e39df91263267ec0eb32683c809c360a814ad49264b8efedd08bc8a9788a0b2e4a31d278e3b24ff62b9a174be1366ad263ffab95065b41
SSDEEP 192:LRecBQP1/5MZ0wMjv7sBpAPRp2rv9NHsb+WNE6E1BLk2r7eo5aHaEPyIsnAUgtaJ:LRemQdJb8UXyrwEW2ta6W8
TLSH
T17E52F92FA911657BACDBC229FE227767D7F5202226C42D84EBFC8A1C14D75CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0d2a156654c1c543f684a1b78fc1acde7a605db8760d180da55c6029bd11d4cc
MD5 fca0a080e03e1f9f1f1ec2f425ee2b0e
SHA1 04435d408b3c935d0c54889e9019a986e7e3d26e
SHA512 0133469141ee35d9bb385a53718d74af5f96fe7ea3c4d774df026da6bbcd201abccd4b10b8b4bb6f9e60e57cecfd324ba1f320a5bc5ef4bba05fdb56deff9ffe
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLuLcSj5EXODtw+ErU3U2HG4B6T6:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pa
TLSH
T14572F9A76C4C8E770F94CACCDC16BB4FADB5024B65E9886487FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 6933a8586bdb36dd8324e37091aef9e70a5beba8c75212e2c4a982323cad9abf
MD5 53b26727bbc3bfd34494e160885cd873
SHA1 3ca75257454772b2469e4381bb549890546e0681
SHA512 7dc2a2193639bd70829a1c19927236a9407a9fe051a3713a9d36228c6bf7518343fcc93dda0a0dda818683d85f85ed319a966599e2be3c11331d302c63f67764
SSDEEP 96:F1mKRMLRwcnDh1JDcgLXbXFXKXT9tFXSXTzXFXKXTgtxhXsXz0XbXNXKXTkuZXI0:F13KqmDh7HL1aj9TCjz1ajgd8YL9ajTN
TLSH
T1A8A16A6EB90A184EE4AD0936CD78571B6F69CF0C27FE3767A9DF8A0405B0A5701086E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 333B
SHA256 357591d267bb4f37a95080dec74451696ae4fc5645112c69353cdc0a7e9eb28b
MD5 bcd4c5bdc4f86a24b456c7b2577a7446
SHA1 a3af2b5aed72c1c9fca71363b756aa770aa337dc
SHA512 0d53819de3969fae596fb468939dbdc5ad387b6b44200e4aca273e8ea9816c19f9d78c9a09fed091bdca3697b511060419804c80550bd5c7b2a0118f8fb302c0
TLSH
T1BBE07D0037CAC5BD305E904B42ABA70C87E5BA1DD2CD3D421F06C68011C7808F3D26A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 7c9213659220494af9b5008670f98b679f69635b7b0a7cf055191002e12c25eb
MD5 0d25ff685ff65677014f86ca12a93998
SHA1 65b6f725add383b27e7e1b537feace8fa7008b16
SHA512 107f9516e32319265aaf8a9c8f0f604d460b5d7b7ec77e5f23849541af1b17b02ac47ef7afac89dba59a2a028d07444ef3d560c126816ac592f77d72f628c1f0
TLSH
T114B01200C0015120C04601F42542588C6144EF18950F270183E06D338C65062802D0A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591246.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591246.TMP
Size 96B
SHA256 6d5242c50b429bc0d951540fc45362cff6b3abe38a3402ff1fe14f4c3bc0d339
MD5 11512da65d08ad1ef0252e232b80867c
SHA1 f1c064d4615f9491f0d7cd3c278625e715ae0414
SHA512 792346c9c67e74e9f9de725c5ba09d24ece9b6a8c52a7f2885b1d893bc302f3099fa8850f68868899f1e6460247ae49515f0fcc698dce46b2a8ca8ea643e67b2
TLSH
T13EB022A0E3822202C00203B03A88A0C830A2EF3AC203020283E00A22CC303B08020A20
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log
Size 308B
SHA256 cbee1100a2c9add47776b7e416b58a809f6feb9fe458bef8185b0c176b5db340
MD5 4e7982b86b3d7d916b7722aa3b3f0669
SHA1 ce4e874903cb71d9012cc7654ca7a6ba5e4f7efd
SHA512 c4dda8b36e90a327061dab901730f47fc23cca129b02a157f1ed0c566a1d6dddf272a4e74d3acbf14eb3a7fac0820387a584db9e19ca299724ed7f3030f891bb
TLSH
T1E3E002D812C1F027FCD986300D4723302F21D8BD1F311D43C4CD35D0061FA653401441
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
Size 320B
SHA256 d92b98d9969223fedf1aed117e31af1eccee1f0e95a3f27e1a5f6c558cd164af
MD5 e362df9bf06a70de583b694a3ea169b3
SHA1 1793789c23184429560829a77e897594b12e0232
SHA512 fb61bd79db1bc8137b1f4aa0c161f77b23326e55e8ab62232b64ade219dcc87ce7d98559d70af9ac2961ad5c039802f3cb2a5b176059d986a2027a43d4887ba5
TLSH
T1EAE086A537CAC57D2554946B0265770CC7E33915E7DD79421701DC9432CE408ABF1AF4
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13428002389154250

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13428002389154250
Size 2KB
SHA256 f7dfcd8e957b066790b29bbe0717b787924384e77098c8f8840231a712a9c33a
MD5 373ea8ea044305e100b431c11f4e45d4
SHA1 33ada2832489ad2fe3ad7fd133572712527d0fbc
SHA512 92fe2acbf25294af96da54c7c0fbc346cddaf4eb8f3ff1f63f9beb9e55942c8cb2bae7170dd28523212ef0099501b1c83414814a587e77562a44b7bf3160b305
TLSH
T1F051BF5646E4003EE63F813B97B618D3BF35750130469E1FB26162C84C536C2EF69EEA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 342B
SHA256 286516986fbcfabbde8a5a7ef6fb653d4123076947ce4c3e848aea43ae688ec8
MD5 7eae03dc6966c6fafcd202a740f95df4
SHA1 f7c44e5a2a3b328c18559601dd44e49ddfe2f7ba
SHA512 40f22fcee154da646cd8484f455e5efb632b4113c8af183af6caaa4ea0937e245d7342877c2c990fc467ad97887e2d1d0685b5c10560718597ffe0f3336172e2
TLSH
T10EE0D8203BCA8B7E6159A09B532AF30C85E3BD00D6DD59511B08A190628B40473D36A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 318B
SHA256 5ce6b8b470c7729375f37c51a082ffe0edbdc485eecea83e2794337fe091af83
MD5 e6d2290986ed0e84de5de260b7983ea6
SHA1 d37de983569129c330711d93e655ace8541d80f6
SHA512 d88a1b97650898b0939e2cf48faff38adeed685f7b974cdd64e88c6e5be13347c0096ea1d4ad79cb2da65ee686e3deecc43d770b81224d5a9d4fcecb73c7c0bd
TLSH
T13FE086703BCACA7D6444D0974369F71DC6F1BD04E7CEBA86570854D061C6504A7F1AE0
MD5 SHA1 SHA512 TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
Size 138KB
SHA256 bbf50a4b6f6c38adf7a1565ca4ca66c4045ffe6f3a023ec54dc0e5b6f34dbf17
MD5 ba21d555526cb0f0b8055a8c0d136145
SHA1 9ca19282f098ee73646361825ae381541413a815
SHA512 46b716a11e39523d03009a5f2a4c91e4e89f9ec02ca4b2ddbde65796693ce5ec40162101b99852442c31bf7797961a0efd10323ce14b3959118d2d7af5a45244
SSDEEP 384:jeuvBnhJsueMEGvIW1DcP2OrB1VumVLnH/:1nbZeMrv/hGtrBrnf
TLSH
T18AD3994B3A747102EDE59A721CE050BB5D3CB16D8F55A1D4287620688EF2963B23E4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
Size 4KB
SHA256 2219c38749f7748bd1cfaa7e014b8e6b3b1c0ba3b51a6127198389eaed538929
MD5 3bdeb9cd310c82fc97fce407b2952764
SHA1 0c4d10ab195da7c145c48ade1eab5ce951d4a515
SHA512 68ce8d59b6b78f8e209c63070946ec778b005c1ba3097d397799afd686cf3794fd0527eab1e206629ac6f85e0480682293d6ef4512f46c57826f65ca6e3813cf
SSDEEP 48:WeNJz725MYOdq+4LWSNm6zgaMXBVwWOquu3Br3TL/eOEErjQ10wY0wi0wN0wBgGC:Wej2SYYCWs3qvO4J
TLSH
T12D911EA336D02183F8FCDA7CF49B7A4D9B15A191D865E2FC907400080A66F2361EB5FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 f09a8dcac8351213c412683b921774b8aa2295b7242774d4c37613166b632d41
MD5 4c2ad95de98d3526b6dd85c19f38a879
SHA1 fb763c0c72aa65267d75c8eb9cb83b36dbdd9d2c
SHA512 6da84558bea64247a1a768577b1e6f2cd83a978edcd0d36a91253c408147176f4f00a20de0f4a1e7acf11bb2a335f784210ea5dd1645a82fbb7045af0e54a815
SSDEEP 96:f7doKsKuKZKlZNmu46yjUKVXwX4H+XvXq:7ZT0nzXggRfa
TLSH
T126033F8F562C80F3D0F6C23EE98249D6FD7C6608A7237AD519F907615DAC13790186AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal
Size 8KB
SHA256 3534f43e3ba3774558e661de45674b8ec6075e96e081c5070aa0e9a57fc8034a
MD5 170dc5db775a5c740d079d08d9e7df96
SHA1 00779f6cd6f5d0ae5bc78ba3e5f9bd448f8d3a0e
SHA512 7f75bcf117d211813f261ebc66a0256500e3564cf3dc66ee5379d8496376180715dd2ac81b28cc6d9d261cb23863d565bdd23ddafc34af81e627fabe9bbcc861
SSDEEP 6:ElqVkR+PKEGC+Bcc/XKuqHKu42nz+GlCc/mLEJOgLEJL2SFH:ElqVk2B+BXXwX4CFDmLULIZH
TLSH
T1F002DF8EA40CC80AE4A1833FC69D9C826E2919A83B52771938E449046CBA607C0143AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log
Size 22KB
SHA256 7d7cb338fd8379898ab340c39405ef3dbab3e133f34f7f7aa325503af425c36e
MD5 9737b4bf27b7796f0c474cb46419fdf3
SHA1 e6379aad86ef7d19909f37f36a515792f6fdbbdf
SHA512 126b6ccc8e53ca7ebc840991c83ab3ed863b0877507f30aeab2e4c76f7c556d9444a5b637a7d811310bf6d4ca7e6efa57bda59328a8aa99c935dbbb93b43bbfe
SSDEEP 384:Q6LCsdGRXgQXIIImbGMIMNBTKaBsdGUWQ2VyfsdGzojaoJsdGJ7:uXgQ+C6L87
TLSH
T111A2E79AE3B01B8DCCDF97FFB8558C6A07B39C89C4560041B4A156FA2473E064D89BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG
Size 317B
SHA256 59ce8b7eab0e4bfc9f4fce8e1a72923b3b5f760ba8a64241e75fd81eb3ab03a0
MD5 38395ce296350d1911e6e81ba58900da
SHA1 045af3546367cd6e89cb1b1a0dbca866af288262
SHA512 53fc3ec4ffdf8ed5742a8c510d599d57e784f4c13f453eabd8e98af803d9dcf43fcbc434f59973affe407d0662325f2f5ae4ef9c0a87834f6bada34ad3ce3722
TLSH
T112E026007BCACAAE7415A0AF1229A70CC6C23D01EBD8148A4F01C04450DA004A7C36E0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 e5691c5ca3267d49d1fe42e35c7454dc3fd7ba7d59433241e7af224e39afba13
MD5 4d5d9035bfcc35870e064b4e41b7facf
SHA1 46cfb37d9225ad2da607bc7928c290428f06f14f
SHA512 b653400125b0887c013e555c770e144bf6c90d5988824001b20244adda83fcd8fa1d8a4ddd2828239a0d4a1e87c0d4f0bd11d610d02db26bf3a1dc9917070620
TLSH
T16521F556F331C248D25A463A607FAB151334D4569FFDFD0F04B620683EB6E040E476E6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG
Size 335B
SHA256 1411de1ba51dd6086bc8f00826db717d0933752e66794ad385b1648a9ecccc03
MD5 b316e4268471d28a4008e70a96d4d973
SHA1 f200eb6acecc10889fa4a21d93bd58d3095dc904
SHA512 fe9cd8ab57871cad3f3fd95f24831062a415c2f43f76ae7c5b9366ca9f97c1056f9ce3607f91a2506f47c5a062ecff431d42aa6c8dd6cf321ef2bdd42f0cef7a
TLSH
T16CE026417ACACAAF601190EF216BF74CC6D23C00EEDC2E4A6F02E84451EA004BBC26A0
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e62ffb77fc6c2e4d320c7a434bd4956360f173dc073300aa31cdffa7ac6a4952
MD5 05aeb3beef0c8b1e621e2b3a9ed3a16b
SHA1 2cec6b199281a86c8bb3eaac194234cd37629065
SHA512 469f2ee776262a2014464e301d05726e038631fb9f9d90fc379fa2e73cd61e847910aa5dbadce5d482b0ebf7be42b1dac463985d133ae48c007d17ca93e9d8dd
SSDEEP 3072:MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMs:/m7Rkm1tYpBeh2BAos
TLSH
T1B1C3123B5D75A93759B6B71EB08E0B1F1EF14AA7C920DE92C8D85B0423EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 6d958e9f4e4c12edecc3689178fa0e950d34d2041c412bdcdafe1fbda901bd74
MD5 0a2f5671d44f8428c4f2cf72144e39e3
SHA1 a9da7866ef25f2153951ad698bc3883d5122d08f
SHA512 6dafa6b62bd687d361a17f91a7b247ef13b818b08de199fcb1569e7fcb774073c5daf26877bc259f6b3dcfb06327c1f1042f35ea156aca5d9d19a927533604f6
SSDEEP 3072:cGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:vm7Rkm1tYpBeh2BAoe
TLSH
T146C3122B5E75A97759B5BB0EB08E0B1F1EF14EA6C920DE82C8D85B0437E97CC0A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5ebd8b36949f976199a717c4ce3cbf497eff8275faf610e8c4ac11d855e4f7d4
MD5 766897433d32d334a09f34fe022feade
SHA1 85a2428b360ef0e4d5868fc34004a6150f06ebfb
SHA512 49a85a177aa13c0d0f6f06abc8d09d4ee87bb8af3e27788f671f0713ee0eb74a668e07ec96ac40c0588e9c0c8706a5cba5bc56b55d2245060ebc9f76cd3f3f6e
SSDEEP 3072:kGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMn:Hm7Rkm1tYpBeh2BAon
TLSH
T19FC3123B5D75A93759B5BB5EB08E0B1F1EF14AA7C920DE82C8D85B0433EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 85B
SHA256 40395d9ca4b65d48deac792844a77d4f8051f1cef30df561dacfeeed3c3bae13
MD5 8549c255650427d618ef18b14dfd2b56
SHA1 8272585186777b344db3960df62b00f570d247f6
SHA512 e5bb8a0ad338372635c3629e306604e3dc5a5c26fb5547a3dd7e404e5261630612c07326e7ebf5b47abafade8e555965a1a59a1eecfc496dcdd5003048898a8c
TLSH
T1DEA0120384738406E4184092C45C1341287C80570119C0012074931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db
Size 48KB
SHA256 98a55546e41fe03178af27446c0389ccc2781038f0b7348d2ad50846dc33f5dc
MD5 ed12c620433363f3bae135c5d15dca2f
SHA1 5414b1db440c59cc15f8847894da1f79ac9843e7
SHA512 3da4b07665fb714d7203dfd8512ceff56b29f2a6e7cb17d602a3dee21969cfb4a20236fc1605374054268d634d1412a3887a4a76a931bda931eb469c22b04b75
SSDEEP 24:TL74/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6UwgfLe:TY/IHRH34kWqB1kQnjhHmr6ITmU9Le
TLSH
T10323886EDA2CA9A1FEE40B3DD7D1D0127735AA0EC2E4D9F1099B406746C540405EB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db-journal
Size 8KB
SHA256 6a81c7b64284a4e288f751e6e21d91d3c10a473d363928ead0ca6faa2f4f659c
MD5 8f638851152e2bbffe40c21eb705e04a
SHA1 3a62e24d512bd1bd63ae2621c8ce9b6b4f1b3eba
SHA512 328a87f3db1a21c3ca6ae90b0376a8e040d3f02554e028813a4b400860dc13dd68de3aa300e7ae8f43c483ae34f409625a87ce1feaa9156731fe794d17ed99e1
SSDEEP 3:3klzHlFllQ/8QuQll/lDAL6SlreqNcSFYojpuyOV9RUIA6lubqaq5AblGKQlTJFA:c0/ZlCzetGyS6lubqaq6BfOKn
TLSH
T1B10212435A219877DCC4273E63C740DFBFB2361C0A41BE159164C9235B81648A74857B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/232-129-0x00007FFF232F0000-0x00007FFF23300000-memory.dmp

Download

memory/232-128-0x00007FFF232F0000-0x00007FFF23300000-memory.dmp

Download

memory/232-127-0x00007FFF232F0000-0x00007FFF23300000-memory.dmp

Download

memory/232-130-0x00007FFF232F0000-0x00007FFF23300000-memory.dmp

Download

memory/232-131-0x00007FFF232F0000-0x00007FFF23300000-memory.dmp

Download

memory/232-132-0x00007FFF210D0000-0x00007FFF210E0000-memory.dmp

Download

memory/232-133-0x00007FFF210D0000-0x00007FFF210E0000-memory.dmp

Download