hxxps://mibc-fr-08[.]mailinblack[.]com/securelink/?0QpxZJeM9EfhD53c2BbJxtmusfOpBvgZK&key=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

Resubmissions

10/07/2026, 16:27

260710-tyjcmsfs8x3

10/07/2026, 16:25

260710-twx31sfs7z3

Analysis

user interaction
yes
max time kernel
809s
max time network
810s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/07/2026, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://mibc-fr-08.mailinblack.com/securelink/?0QpxZJeM9EfhD53c2BbJxtmusfOpBvgZK&key=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
Sample260710-tyjcmsfs8x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2168	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281744897496444"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
5352	chrome.exe
5352	chrome.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs

pid	Process
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe
Token: SeShutdownPrivilege	6012	chrome.exe
Token: SeCreatePagefilePrivilege	6012	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe
6012	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 6012 wrote to memory of 5812	6012	chrome.exe	85
PID 6012 wrote to memory of 2168	6012	chrome.exe	86
PID 6012 wrote to memory of 3464	6012	chrome.exe	87
PID 6012 wrote to memory of 3464	6012	chrome.exe	87
PID 6012 wrote to memory of 5980	6012	chrome.exe	88
PID 6012 wrote to memory of 5980	6012	chrome.exe	88
PID 6012 wrote to memory of 3616	6012	chrome.exe	89
PID 6012 wrote to memory of 5256	6012	chrome.exe	90
PID 6012 wrote to memory of 3616	6012	chrome.exe	89
PID 6012 wrote to memory of 5256	6012	chrome.exe	90
PID 6012 wrote to memory of 5084	6012	chrome.exe	92
PID 6012 wrote to memory of 5084	6012	chrome.exe	92
PID 6012 wrote to memory of 4440	6012	chrome.exe	95
PID 6012 wrote to memory of 4440	6012	chrome.exe	95
PID 6012 wrote to memory of 5564	6012	chrome.exe	96
PID 6012 wrote to memory of 5564	6012	chrome.exe	96
PID 6012 wrote to memory of 3596	6012	chrome.exe	98
PID 6012 wrote to memory of 4628	6012	chrome.exe	101
PID 6012 wrote to memory of 4628	6012	chrome.exe	101
PID 6012 wrote to memory of 4148	6012	chrome.exe	102
PID 6012 wrote to memory of 4148	6012	chrome.exe	102
PID 6012 wrote to memory of 4036	6012	chrome.exe	103
PID 6012 wrote to memory of 4036	6012	chrome.exe	103
PID 6012 wrote to memory of 2356	6012	chrome.exe	104
PID 6012 wrote to memory of 2356	6012	chrome.exe	104
PID 6012 wrote to memory of 5448	6012	chrome.exe	105
PID 6012 wrote to memory of 5448	6012	chrome.exe	105
PID 6012 wrote to memory of 4432	6012	chrome.exe	106
PID 6012 wrote to memory of 4432	6012	chrome.exe	106
PID 6012 wrote to memory of 3828	6012	chrome.exe	107
PID 6012 wrote to memory of 3828	6012	chrome.exe	107
PID 6012 wrote to memory of 5424	6012	chrome.exe	108
PID 6012 wrote to memory of 5424	6012	chrome.exe	108
PID 6012 wrote to memory of 4792	6012	chrome.exe	109
PID 6012 wrote to memory of 4792	6012	chrome.exe	109
PID 6012 wrote to memory of 6112	6012	chrome.exe	110
PID 6012 wrote to memory of 6112	6012	chrome.exe	110
PID 6012 wrote to memory of 2932	6012	chrome.exe	115
PID 6012 wrote to memory of 3656	6012	chrome.exe	116
PID 6012 wrote to memory of 6008	6012	chrome.exe	117
PID 6012 wrote to memory of 2692	6012	chrome.exe	124
PID 6012 wrote to memory of 2692	6012	chrome.exe	124
PID 6012 wrote to memory of 1108	6012	chrome.exe	125
PID 6012 wrote to memory of 1108	6012	chrome.exe	125
PID 6012 wrote to memory of 1520	6012	chrome.exe	126
PID 6012 wrote to memory of 1520	6012	chrome.exe	126
PID 6012 wrote to memory of 5652	6012	chrome.exe	127
PID 6012 wrote to memory of 5652	6012	chrome.exe	127
PID 6012 wrote to memory of 5380	6012	chrome.exe	128
PID 6012 wrote to memory of 5380	6012	chrome.exe	128
PID 6012 wrote to memory of 3940	6012	chrome.exe	129
PID 6012 wrote to memory of 3940	6012	chrome.exe	129
PID 6012 wrote to memory of 5740	6012	chrome.exe	130
PID 6012 wrote to memory of 5740	6012	chrome.exe	130
PID 6012 wrote to memory of 1632	6012	chrome.exe	131
PID 6012 wrote to memory of 1632	6012	chrome.exe	131
PID 6012 wrote to memory of 5324	6012	chrome.exe	132
PID 6012 wrote to memory of 5324	6012	chrome.exe	132
PID 6012 wrote to memory of 4652	6012	chrome.exe	133
PID 6012 wrote to memory of 4652	6012	chrome.exe	133
PID 6012 wrote to memory of 5352	6012	chrome.exe	134
PID 6012 wrote to memory of 3284	6012	chrome.exe	135
PID 6012 wrote to memory of 3284	6012	chrome.exe	135
PID 6012 wrote to memory of 5556	6012	chrome.exe	136

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mibc-fr-08.mailinblack.com/securelink/?0QpxZJeM9EfhD53c2BbJxtmusfOpBvgZK&key=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
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:6012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffcc6c3c728,0x7ffcc6c3c734,0x7ffcc6c3c740
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,4595238279065234965,1470532709123675512,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,4411478844878070374,15330924142140614345,262144 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2056,i,386809998546708608,6431849816932484385,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:5980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,4828175040360590928,5475213382139152770,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3156,i,5684125665252646346,9801316512078878708,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4392,i,4949278889920977207,13021423225518522296,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:2
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4844,i,1819465429598665281,1821144704507847811,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3888,i,15860982389730383218,10484154378563381966,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,6128654977395938627,7840374311028248751,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5584,i,7761670836101132102,12535183013649471288,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5708,i,3042572059932814193,1164777190539160063,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5556,i,12138710240785069107,16458116768907474804,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6160,i,11628667933728664493,3920142168348778271,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4800,i,54786470541631578,13892020316201466970,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5760,i,10259437273024028505,8581561790742711519,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5972,i,14356929369215224795,7484115972030735739,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5584,i,12071945395188158126,10292142445698686836,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5904,i,15035938479071047634,16254142958766066117,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4704,i,15195943728154349985,11921570955643288549,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,14099114441454004099,16685207188790944167,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6356,i,14918043127098443664,12332078667649657055,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,11836054795417256130,10598301724236442925,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=4460,i,2123866139502528948,13097746830256314131,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4412 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=4788,i,5755023737361718374,7380006961730572034,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=5940,i,2608995157492205352,16183870285784999466,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3888 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6612,i,1968818907632023417,9558820396728029422,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6716,i,16731456121664047146,6609981886083816636,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5724,i,14856665030186629563,9693149477354857873,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5620,i,9993424843035988204,16864465153226922683,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:5740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5844,i,247527493143421487,8807513602585942147,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6488,i,9964105116525413779,5815055828106834503,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6380 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6148,i,16650461543495737021,5528992574112490609,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5772,i,16621582578211637493,9881676629986977376,262144 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=2612,i,6968901735366039986,5166641352921741999,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1160 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4448,i,2832516954534899288,2406721437367011707,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:5556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=5112,i,8966236487914509032,17957962022538842655,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5880,i,10301322739049909010,16514559634870287392,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=6272,i,6732693488446225466,8989453244045309788,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=3132,i,2564355199043917759,5558250664440990653,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=4476,i,2409344293099954643,2115566212818943059,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5276,i,17823101735626576681,12439638431341685925,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6592 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4508,i,10769485924254159407,3630219896589083705,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=4704,i,6173227024440598551,9662463879662799213,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=5948,i,6988307773319276128,685365874748879555,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=5872,i,5697052192356210056,382483822028533927,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=6768,i,4484085208191135742,11420940135464461494,2097152 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7016,i,15081435199986555580,6011049016736275411,524288 --field-trial-handle=2092,i,17209950929037868422,4632573925532085112,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  PID:5448

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5696

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0f08dee20bf8ae9227df1ff1182c4879463e92602ed237326291c4bc42809e74
MD5 5a41b8c240e0c88c0600afdf859e2bce
SHA1 d061734cee7385f9f557553962214ce06fef0357
SHA512 fd1fd0fff085b06d3f5eeda5b11f035c6e71c7cfb4c80d123f63399d810251d120428cfda248aae1c2b4ecab93873b6968aaf7f2db4e411ee370eb5f9b710974
TLSH
T16FE0E5AEC9619C2718FD1758A051074AE65513573740449F3A3D89088F7562B4A4AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
Size 39KB
SHA256 7b020d512c64196020f7e42ca827d1086ed47883745b8c0e8ec4e7b4470a3e24
MD5 bcd8e4c8951fada24860ef1949a98020
SHA1 71c8b4eee246ac28ff4295965f5788241270d7da
SHA512 50021074ea6a8b94cb724b07e1c562d88d13bd1c7cdf87bd85cb479134b2942ce84f8777ad37217085098c7b7890ca6ebc4e8247de4a4d05095153216b667dd6
SSDEEP 768:eAH99Q0FtFfYYpux3MYRXb4Vv1/IqQDBW2qFmXQn+xltRW88qagLbM6HH:eAZFE6TYtqQDBW2nAch8wpH
TLSH
T1C303F1E9647F1B26737C58D9C345E075C6BC8CCBCB8101A6267291C8B53E929231EEB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000083
Size 373KB
SHA256 a5c27d3298042314d98634f85836ab0c48cbdf572ee676981a852c3e18738d8e
MD5 7eb1501498252ec1a30118a2d3917c94
SHA1 b275a098ab3e050e2b4ac71eac10c238c2365c45
SHA512 8f5831b6bfeaea74aba0d23b684687e0a308f51f1528859535c9df335367b946b6be42500ce637e77baff40795bbf152e24abcfcee227c6d9d0e490412e09d26
SSDEEP 6144:bBJYkBiu4su2hIklCVm8ZiLHBd0R+2jBLX47rD+CNOgtU28xNAoWclJ/lo31jjuQ:bfWV22kvnBSw2FLIPDVNfN8nWclJ/Md9
TLSH
T100842306FA0DD6F4A7A40DDD2990A3E04D1372444CFC4A347B8523B9DDE3AEF4A159AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 1f1845c66137bc77a532d52048b1d9ccbc131fb10d2537b3475a02bfc68472ca
MD5 0f36cfd9411fc5a86fdf95f115b6b7d2
SHA1 f111a4893fba747c013bd558e0db4728b17dfe36
SHA512 c7920a4316a0f760b8db81ffcaa54cb717fbe999eca47c90044c14612a1e92ab9147b160c94e0e92d62631ef1a16f48c0d4a08862103d2114a5a54aa7b4689c5
SSDEEP 192:0VdVE1x8AW55l/ldCbbrghGMtoN4anPo/MefhRNpq4OUGA5Muc:0AuAWNtUb/ghG6c4PHpT1a
TLSH
T14ED1A8651FE24AD9FFA16534CAE5CD6CB63749EA20438F23C258753D8A777E23843024
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 f4c854dc31de64b861d518d0eafdb3f1733f6461bd3b5328ecb69e865ea0d113
MD5 634e0b0cada6ad625f803e190b9cc23e
SHA1 2cec6007220c44a837bea2917f32b8babee29570
SHA512 544d78f3056f3480e5f536456c0c19ffb84c5a371f3b44cdfe92ae1c2b8ae8de29dbbde5d4a7d58e33b5452bb9aa470f47804c2977246b3ea5cd0223efad763c
SSDEEP 192:CV8DqdxlAW5MZfge/CbbrgXGMr6V4atPN/MVNhR+9qOvTUYtgdrbKw:C7XAWShKb/gXiSKVe09pNeFj
TLSH
T1B6F1DD555FF34AD8FF516534C9E6CE2CB23749EA20538F1792587A7E8A637E13883024
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 d1d406c8050dbf74a890801e59502d22f051494878af8133aa3ee0651221a13a
MD5 780a3df753421f9e79b156266b23815c
SHA1 2e3ef3123c8e922f17fa1a7d91f768a755fb0a45
SHA512 efb87fe8aa144fb846e90e8571e12dc7383589141fddb6d27d6ad6270090205b2c863970248feba4844f0eccf205ec9e692adf789ec06bcdeb35611035d222a5
TLSH
T123512DA92FF28A82DF45823807E68D35B13B46E75193CB26C398352D15B33B32D03460
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 365882d7503cfbc6bfa41ebfe68e9498c59cda3b58c08fe45e1884da287da32e
MD5 83f1ca96f67741161c5739c311bbff9b
SHA1 c64f7bb37014cc2f61b1d18d82bfefdb045a0581
SHA512 e893453dcefcbbf76ed6c1cee2391d0ba45dec0a80e37ebbac095aff807b32538a5a1ea4a82f5ce7e2d5e27a4d773d38ad66c38a66379e2eb50fc6dfc96290c5
TLSH
T1E83131846FF39AC2CF4592388BE59E79E13815FBA1924B13C198112D26A77A30C47470
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 c394829ee9f62f5a1ffb1c174103b89dfcb8b9b1e5b1481f9fd6500af0587f1f
MD5 0ff21c460358ad63bd4ccee7391a082d
SHA1 c74bd8ba8d02f7a52b7fdbde79b36b5dd0ca22e1
SHA512 fe7810558be3daf7e25f50398054f02ca7d5010ddb81bd7b46cedb70d0626b7ffe263b0ef79ac1be0093ed152a86c752ffc5f174477692a846503d12bfb87dea
SSDEEP 192:Da6tV+Z5aaIEdHGNiQdnh3E4twVKZiLKydK/KXKMKdcK:Da6X+Z5aaIEdHGNiQdnh3E4twVKZ6Ky+
TLSH
T1E1D1C0F783F48A6D8A11A2F4AA147E2FCE690515436C3C6689D4BF1B97E34B1D20075F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 909ebbc021eaf4cad410edb2d28aab3c708c87aa518b335e3fb88a66cc2f4d69
MD5 4be9e061cfda5f99dd0240624efe2b7e
SHA1 c758e8ec8f18f3ef0bb7cd4a9eb2b0c0ab4fa2a9
SHA512 bee4376e430cc136c0c9f33783ea45c7385cc7e0ee56d297372e6a8d892b3e9dd8fd011ed0e1d98bef09fcc476f864cf33628722a50d7ba837d8409a01e1be35
SSDEEP 384:DkayPFwmiEHZVSUzzbJn1D4fM8uaakiiQdn63vz53U0KrKyoVL/KXKiYKM1HNiNg:mksW66qEMka4Ol+S1GR
TLSH
T165828CF783E4862DC91162F49B247E2FCE590928532C3D6689D4BE5BA3E3472E24174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 88ccd427f7ccc938ed5928f5c4cc71b2d5def26b864027c701b3f8b639be642a
MD5 97b3616280469b9d5d365d1e61d39b81
SHA1 a3eefb36fa249d8e90183abcdb1a940844fa020b
SHA512 17031a1abae11f0c76d3490cdb9a993aab4fc542d2a5cc30965f2d0bc54f5f538fafbbf5f43ab3968d24ad67e3d61e4f73e3df8f46f0acf0c80f57593352b3f8
SSDEEP 192:DJ6tV+Zh/oaaIEdHGNiQdnh3LzjhYsMr0KHLKyyVL/KXKiYKJx:DJ6X+Zh/oaaIEdHGNiQdnh3LzSsMr0Kj
TLSH
T1BCE1BEF783F48A6D8A11A6F4AA147E2FCE590515432C3C6689D5BF1BA7E34B1E20074F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 b6e1322b01bd5deeb081658cbf0d827053d17754852f387c5ba86f35950cd0af
MD5 36a9c754d9ae6e388f2adc5daa836a83
SHA1 77973d4dc3c72e19c6242e1053b0f62798c690e8
SHA512 22dcdba03f919f7dfa39c771b4f803ca1326379532912c386bb94b1ed790dd5f465cced3dbcbf5f0940535157a91b4f744109646b631f7b760a0c0956650adca
SSDEEP 192:DkaWVPFwmaaaIEdHGNiQdn63vzjhn3U0KHLKyoVL/KXKiYKM1K:DkayPFwmaaaIEdHGNiQdn63vz53U0KrD
TLSH
T185D1C1F743B0CA6DDA11A6F0AA147E2FCE580515436C38A689D4BE17A7F34B1E240B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 9feba08604b308b28a7ee9f776ce3d5fad191f4a240cd009ff4d732d8c9f3500
MD5 8f8da09a55d21f83153531e1c4a787be
SHA1 82bd144caf26bd19179d96bcef79e53fc5a11143
SHA512 726ed6d58d97e8fe9e2925758259357bc960cd608cec6cba6a3c9ce85d485d6c60bd1c26b9437fc3f4bf7e95c41f4e320309a86049df7ec6171a274c25cd3c4e
SSDEEP 384:DkayPFwmiESZVSUzzbJn1D4fM8uaakiiQdn63vz53U0KrKyoVL/KXKiYKM1HAR3+:9ksW66qFOl+S183dGgmP
TLSH
T16A828DF783E4862DC91162F49B247E2FCE590928532C3D6689D4BE4BA7E3472E24074F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 b431b08fb507db3751aaa357013de6d0fe8608cc09188606213ea0a565c5253f
MD5 a2a2c1811bd33970766c64a49a4ac8f4
SHA1 ad4a9b23e62dd244b0965e878379c4873c269747
SHA512 dc2aaef29358f4f71d63a3702cca1d69600efd858ca90b771544035a3235361713009c6960bd61d1d6a27512b89ac8e0d33d37eaae54f7480669ca8a4532671b
TLSH
T1E05190A782BEB45B146D58EF0D94BC052E7EB8321251E8F9CF5781ACF0958FB0B16472
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b8ca18a5d123720354e09e82bec21823d4ed53307f4379df9a56d4d42315f7dc
MD5 7c6c10b07cc853b172f3d262fc5c1924
SHA1 2ff373fd501a1d95b8328b355c90c8966096fbe0
SHA512 280cee78b9179a2580397ca6dec66d8f12f5d01928b255247218e7fdf59273cd6298fe9bb9e8df61486a8ba8ff215dffc541bbacd7424128986280c64ae42a18
SSDEEP 384:5RnpXSiJ13U2kiBhtXHGvZ1sQw+oAoLmTQi28YB2rE:DpXSiJ13U2kIhpGvZ1sQw+oKT28vo
TLSH
T1F062C56BE92059BBACD7D22AF812BB57E7F5102522E01E85EBFCCA1C10D7ACD2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 2345a149e04fa16b0735e903754466da325af7fd13245dc2c92db81e8c217ba9
MD5 ad321f454cea0f1b9af3586e812edb60
SHA1 a3924643ddbda6e279c01c97551424a334d685ac
SHA512 c36ef0c7b2bd54bcdb25ae91cd3e17a1d1d35a77fbd543453679f19468d12849ff5d566fb0bc273fd99b8344dedc08948ed6196afd1b4b800d3a1cdd729ba8d5
SSDEEP 384:5RnpXSiJg3U2diBhtXHGvZ1sQw+oAo/cTQi2FYB2rE:DpXSiJg3U2dIhpGvZ1sQw+oET2Fvo
TLSH
T1BE62C66BE92059B7ACD7D22AF812BB57E7F5102522E01E85EBFCCA1C04D7ACD2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 92c1b1da9f7ea15b0fa854f1f1ddfa34f770ba546e6d558347af0dd26b802345
MD5 8e8ae19caf14f32314c3f19810c3cf7c
SHA1 faf71c41f53797d25b6d899852f5228558fa225e
SHA512 c17400ca8941a8fe6bba0119891d2bc82a3a25f11de2ce3ed9776cdfbf8169e13ae38c25172beec27fb995c4e99a751f234f85215c34afbe1b544941e8b77983
SSDEEP 384:5RnpXSiJ13Z2RoiBhUXMGvZ1zQwIiAo7TQ2NWYBUre:DpXSiJ13Z2RoIhJGvZ1zQwIi7T/NWPi
TLSH
T12052B56BEA1069BB6CDBD226FD127753D7F5102521A11E84EBFCCA1C04D7ACC212741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 51402335718afb1e4913198656941b12fa772f998bd8d21270eaf0c211a802e8
MD5 4df9cfb749b86b9b081e7a3914deabad
SHA1 077626e6fc73fc1fbc0195ccc16756e282927ff3
SHA512 61ec4307f82ad33f560e94157cd46dc07a7fd053b3c69371e3e02851b0a45dc77d005987a47dfeabc86b1fd254f4bfb87e74910fb66646403f80bdf0fb71e1ac
SSDEEP 384:5RnpXSiJg3U2ziBhtXHGv11VQwzoAo/cTQi2FYB2rE:DpXSiJg3U2zIhpGv11VQwzoET2Fvo
TLSH
T1E662D76BE92069B7ACD7D226F812BB57E7F5102622E01E85EBFCCA1C04D7ACD2117417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 21321d2b80c0028bc147cb80970718fe0339d8a8455b13b1519c541604c4ab61
MD5 efcf166a489311811c7000f7ff8470a1
SHA1 431c5ffd7ff1b1ea4eaedcc6bcd3d96d7d362d20
SHA512 4d6bd700253040503d3449860144f6051a9f8a08db3eeb0b53986ad8d9b84c669b971b0adf5d6e2975597628fc3883e60ef6a0cbd33fbdfd5d84c5a0642cb999
SSDEEP 384:5RnpXSiJg3U2kiBhtXHGv11VQwzoAo/cTQi2FYB2ry:DpXSiJg3U2kIhpGv11VQwzoET2Fve
TLSH
T19D62D76BE92059BBADD7D226F912BB57D7F5202621E01E84EBFCCA1C04D7ACD2117407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3934163aae61c26edf03c4064bbb987e4680ed57de3cc11c3b6acd497bf7410d
MD5 efc12c3f680444c35cf7ae1e198672c2
SHA1 8c55b712a34b6d27e7cd0ac42e3f699013346632
SHA512 66ad6996b8dda79739c7b002785e35b0308f034b7182330a76f6d8bca34129355d2c93c03065b4bd4aeced187ad22b53ff2c86ffac7d916594ea87d684711b82
SSDEEP 384:5RnpXSiJ13Z2niBhUXMGv81sQw+iAo7TQ2NWYBUre:DpXSiJ13Z2nIhJGv81sQw+i7T/NWPi
TLSH
T19B52C66BEA2069BB6CD7D22AF9127757D7F5102521E01E84EBFCCA1C04D7ACC212741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 ac5a0df6545e6db2793e99d56adb4ef198572d29c9107d75fb6f5146d3ff5a47
MD5 3bc32b7d224b9d601e7a655ba2c0e19a
SHA1 d7bb49d14601518647c0e79d192d113065eb86f0
SHA512 c52a9ace2297522f5acf92d0b7c08fb5873a4cf37d32b0e83f28686933bd11585f29b15285d6ad8e0a113c50a8520beeb0dd6e249ab651b08c9a0b89fd5e360d
SSDEEP 384:5RnpXSiJg3U20iBhtXHGvb1VQwz/Ao/cTQi2FYB2ry:DpXSiJg3U20IhpGvb1VQwz/ET2Fve
TLSH
T1ED62D76BE92059BBADD7D225F812BB57D7F5202622E01E84EBFCCA1C04D7ADD2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 031612ef0a01a5368d06cc7b6d418f66d0a377e1d38b711dcbd8e9564f5882e1
MD5 19737477d486bbf48dc2a91566c4476b
SHA1 d18a1fb18ea8a3958da59891328778b0ce7b458e
SHA512 8b2952b9a043466df0bac19ea04669895507057b383cde20daa23344ccba99f2eb486842a34dca051b38890726e6ffe25b158ed64763756357793a2038a5e4ab
SSDEEP 384:5RnpXSiJg3F20iBhtXHGvl1VQwz/Ao/cTQt2WYB2ry:DpXSiJg3F20IhpGvl1VQwz/ETbWve
TLSH
T1A762D76BE92059BBADD7D226F812BB57D7F5202522E01E84EBFCCA1C04D7ADD2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 73f413bc1330a7a51fb992839edb65bd5c831e8975dda72b92adf0641a7e281c
MD5 778527371cdf19ca6f95138cabdbd6ac
SHA1 bb87400f796b022379dc19ac19f5bcbb93053579
SHA512 0726e7032e11a7243d07b64af7f536fdaae2c3e22961915669dd6fecbcea410de05777f6a1b95a27bfbdc0b8f46cff6a3e858e37b958489bb2635f00f54ef7bb
SSDEEP 384:dRnprmzSiJg3F20iBh1XHGvtNVQwz34cTQtO2iYB2ry:fprmzSiJg3F20IhRGvtNVQwzRTIive
TLSH
T18E72C76BE92059B7ADD7D225F812BB57D7F1202662D01E84EBFCCA1C00D7ADD2117407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\eb8db56e-c526-4194-ba2f-dc4dec78b978\index-dir\the-real-index
Size 72B
SHA256 a3607f2fecf561270a5c91a1fdf92fa974cc818b225da3106242f7128a7fbc6d
MD5 5fb2c6d269a473954767c3e707ae6f58
SHA1 bbf3774166d01ad7b6acc0334502eb21d5031fd2
SHA512 795da2d4431d793834b5b62e08f9d8bb0afd515d29faa99d02b6964c9f49408ea893c12c7888d607e8c9e4f81857c8ae807529ced34c910d2a8c0c6d691b5f2a
TLSH
T171A002B4159101E3DC1192F010A1D35123119EAA2E116247C8DD016DE9593528593440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5898ef.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\eb8db56e-c526-4194-ba2f-dc4dec78b978\index-dir\the-real-index~RFe5898ef.TMP
Size 48B
SHA256 e367efaafe3cb1feae5cbeb959729b6f742094928337ef4bde7aae6eb7f0904e
MD5 5d6b07cdd3f992765a11b5d7e3e03753
SHA1 229936846cb4e437b651f4df8686f19b6810d010
SHA512 46ad5469bc5dcb107b04b40f028a7f5d99b7a0a17096a942e07ba33390ea2ad735d12dad2e09463a68d83faccb85c9a8dd2e8a6d12c9eba46a183ec2992ca10c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\index.txt
Size 149B
SHA256 5c604c87bdc837827bd4e769793e998667d80b89860fb934147aaee90c4cbf08
MD5 305dd1e90e6f3cec77fbd19dc8fc7469
SHA1 44cf4817331475d87960be586ea85530313bc6cb
SHA512 74c7625822b50190bb127cdbc7af4c4eccba0b2bac09696a32a814b8a05cbf0e31966b1fe467bb9c3fac174c912d3522465152bb56a3b1c976aa33b5821f187d
TLSH
T1F8C08CFBC22A8B82F62262A19002E219DF2B020F0400A22949299A0C01240D8C3CBB71
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58991e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\534ac8fa811925c74cff4ded87750e6a894fbecf\index.txt~RFe58991e.TMP
Size 155B
SHA256 a4b80a635a58b6454004515cc4e38247ffb29836f8624fb5f80f3fc9e766addd
MD5 dbdde2603b14b72d58311a56568f0496
SHA1 c1d03b0365579365f756362544f4c99fadf8decf
SHA512 8c7f6d97c5f39a300bd8a94878aba9c0c6a49dd30a647bcd90ee6b612fcbf012f4b7cc440967047e777390ae15ad980259091b35e207973c09faff02f9fc4af7
TLSH
T1A0C08CFBC22A8B82F32220A29002E2099F2B0E0F0800E229492ABA0C1134095C7CA761
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 d8ab43da02af949257b85230e514c34807fbc574bd7236ce9d904175c9ad2c30
MD5 f392c597b291c67dd6d11ecf23b5cec6
SHA1 2877c39e8eb32e210c6f6dc631a3d30dcefbf050
SHA512 d8f02c56da70508ea2ad81b6375a26c6bf9867efa05c5081718a1e5b74aa998c66843a60bd02610d4afb9536fac9d9db833f8da009f18d32eb1abe2f3402ce4e
TLSH
T159C01251D501A592C09703BE2042D8E872749F30DB8FA77852E45A62EC3962380253D1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 168B
SHA256 eece8106756d10adcb497c0f1574059aa1e6ab30b5c3ad9f5a6fc2834b7daf3e
MD5 59a1ffaa3196a993f52bf8b1d226346a
SHA1 0af9151075e2b5f6cc84e32a6d955cabf06b0e08
SHA512 5ebec68d605092cf6523d709aca1eca0e65bd3ff005a4215da931497165e2765465a84017e6c2c5566f5f2add2ee6f65d9b92804f7181776375c78e6417b0c5b
TLSH
T194C09B419501A162C05503B456E1949C71185E79861A675C52A4697FD935131D055151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589892.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589892.TMP
Size 96B
SHA256 1aa023625380074cd8858258b07d54762c78b122654636612bf5197fa54a388a
MD5 675a62901d25cd89514dff189503d7e5
SHA1 bba043939e778205c06a405954361b154b266ba9
SHA512 5bd778776075ddaabe9d30428df84b8f902de4394b1207b22ce10d5368e95a8b663e2fa56bfc1a7b33b5b6cba9c8e96c1648e59f1fd246ec7c583373e38ec6d2
TLSH
T164B00255C2026312D04247B1259699E9B360DF29C603125292E41B66DD797B1456A160
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 d390aec4edc079eff8e6f9b24ce4773208c0c9e0b26bdd1bea2074d44597af1f
MD5 1967d661263be4709fd6aac24b0d4dba
SHA1 aa44a583ad91e1e899b01d1a34f5a14b23f29395
SHA512 4620c36892eaec99e9767233e502281deeab75c6e3e26b1305bda2a44ca004d2d675bf7a62fddbdc074bd861e2127c9990f8550b9931d9a71d7d0c618ba347b4
TLSH
T1E5B0223880003C8BCBCCBBB02AC000C03328EC300303000B02C2208883333228E0223E
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 1458eb5dea1a5bfe58f08e1fdc52a76b40aaf9e1f59fcfd998eab913e74c246c
MD5 51e95ecde6bbfb330353a40fb800cd70
SHA1 e9858bb6175f2ea41df73f911fa19d6c123efa24
SHA512 797c4dbe5d5f96608ffbd42e2cac2c6d4d848c03b3c825faa3397faa9c47b7fa1cd38cbc1fe457ca4484b295ab30a3b0f77e4f2cd39a21b4b5551df54c91647c
SSDEEP 3072:YeGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Am7Rkm1tYpBeh2BAo3
TLSH
T15BC3123B5D75A8375DB9BB0EB04E0B1F1EF14AA7C920DE56C8D86B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 47d3fcd3301b4615d61ee0fc82f4e4e00096ed8f1d8c0e44dab18d750a1ddab1
MD5 19931bd705c9ecedd4f2ac282b0e8ce7
SHA1 1ca80461f623c4d7d7cae0a140e6f4f6f25951ce
SHA512 ee7ee0302217907de2e948a8fb516707f16c989ccc23f902ff85d3ac98b71b4baad654be895348534644df8d69f0735431cae37e1f556ee1cbd2fa8e49d6a92e
SSDEEP 3072:3eGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Jm7Rkm1tYpBeh2BAo3
TLSH
T160C3023B5D75A8375DB9BB0EB04E0B1F1EF14AA7C920DE56C8D86B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 78c91a6289ef679e96aeae0cbec24379d43788bd05bf4a27e31a0036e3ef27f2
MD5 dccf6a27f4b430c0ec591e36a0bf5502
SHA1 1a5b8b2507e51072ff2af5eedceac11873e5dfc8
SHA512 0c13ce3a0718c4651e674bc8850ba7c671bed4c75ef7bce37d17839dd3d9e3a845ae0905bce6c116b4797f3abab6d083e337ee39f8a501116a20864e91750abe
SSDEEP 3072:HGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:mm7Rkm1tYpBeh2BAo3
TLSH
T1FBC3123B5DB5A9376DB5B71EB08E0B1F1DF14AA7C920DE52C8D45B0423EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 5aad4b589dcdd53661fc2befb7432d4fdd870e15b71aaa583a53d64a61cda0c4
MD5 f5cabd27c651d0d0a860356c615e157b
SHA1 33ec548745e3cd42b4ed4811317b113f68976adb
SHA512 1c2de779136db9f893d091afd5d8a96208f7425617e6068550e8574ecc0348435629a10d671e396994a0803134f5060a259a871c201367f6fd8f43e94536e125
SSDEEP 3072:oGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Dm7Rkm1tYpBeh2BAo3
TLSH
T184C3123B5DB5A9376DB9B71EB08E0B1F1DF14AA7C920DE52C8D45B0823EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 c03f31b40cdc7b55d0b7559ec2dd381475373e44f67a3bfa3df33cbe498e718d
MD5 422e1832b3fb7c93efab03cbd1bc171c
SHA1 dac40773e70b73168cdee064437c19cf4704cea7
SHA512 9888a1ea1ae2ba3651798c2bf6837c2d1d5ca0f159ac2a606908c13616b4f9149ac741a7fcfed533ced7ec20da33008dc125853bde92e36e45911ea14cb2c8ed
SSDEEP 3072:/eGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Rm7Rkm1tYpBeh2BAo3
TLSH
T12FC3123B5D75A8375DB9BB0EB08E0B1F1DF14AA7C9209E56C8D86B0433EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 167b8ee53e46b002240f9da82121ccc410465deb771374060fe24d207a01ee8e
MD5 b582c51429267b347cdf126e85647755
SHA1 e0a7972f25cb844f9c3ac04776a627d1a048be99
SHA512 6417ebd7109b6e869656752b0bae3cbbe761df7bd53a8b020d1ba07e2aab7274803d43ddedcdba090454429eedec4cc9bc24aaf2333607ee55f1b6b1506653b8
SSDEEP 3072:QGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:bm7Rkm1tYpBeh2BAo3
TLSH
T1E4C3123B5DB5A9376DB5B71EB08E0B1F1DF14AA7C920DE52C8D45B0823EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 942fdc13de7b36446a2da90efea59429f55fd65732ffaa7b31a4b5d43e98a133
MD5 6678eeadbb3039bfbba90013be51bd6f
SHA1 3ebb52095c410b0543623576630130e0fb204d41
SHA512 ce541815041737a32eb67bb8d36d1ac75908ee4fac3be9bbac7a3eb487ae5fd558ed3eb30a0fcde2b3f81005fed0444967f8a4a072739b911a4fc2f34672e26c
SSDEEP 3072:DqGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:pm7Rkm1tYpBeh2BAo3
TLSH
T199C3123B5D75A8375DA9BB1EB08E0B1F1DF14AA7C9209E52C8D85B0833EE7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 918b71441e9e405ebda99b95710bfd69f4ad585c0ad7bae520e0cbd0acf16067
MD5 f4d3d2dfd629dba7a577ae0b8f209f3c
SHA1 c174774a7b77dbf53861e3fe57797b3247c37fc4
SHA512 0b37d6e5e2cb65a3ac31cda0cb694a4952647b06489d032d4769c55113962ebc9b5b33514138b04bab7c32fb773580ec10114fa154f055cdc53c5dada5c49ce4
SSDEEP 3072:3Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:2m7Rkm1tYpBeh2BAo3
TLSH
T173C312275E71E9375D79A74EB08E0B1F1EF14AA6C930DE92C8D86B0437EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 7adc65252151f7a96ca5a93a3305cae5ce76340ec6b6e3eaa5d9d96f919c6bd0
MD5 bd6ad3470fbad229b12c9ae24482f3c0
SHA1 c81b6cd27c74a138083ca5f7aa5c402f7f003467
SHA512 d97cdf4b8d971bc16f9e51e54034201a6663fbc69e03b598e2227190b559516d6d2951de2dbdb35093ef86032ce1b558ebb70fc56c397f4c10ed2cac00ed52d7
SSDEEP 3072:oeGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Qm7Rkm1tYpBeh2BAo3
TLSH
T128C3123B5D75A8375DB9BB0EB08E0B1F1DF14AA7C920DE56C8D86B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download