hxxps://www[.]adapting[.]com/

Analysis

user interaction
yes
max time kernel
179s
max time network
181s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/07/2026, 19:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.adapting.com/
Sample260710-x3xmlsh181

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
85	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5064	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281850307083631"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{21548053-5C91-48B7-9ED7-4F8422B81E8E}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
1600	chrome.exe
1600	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe
Token: SeShutdownPrivilege	5828	chrome.exe
Token: SeCreatePagefilePrivilege	5828	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe
5828	chrome.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 5828 wrote to memory of 3348	5828	chrome.exe	79
PID 5828 wrote to memory of 3340	5828	chrome.exe	80
PID 5828 wrote to memory of 5064	5828	chrome.exe	81
PID 5828 wrote to memory of 3340	5828	chrome.exe	80
PID 5828 wrote to memory of 3404	5828	chrome.exe	83
PID 5828 wrote to memory of 3404	5828	chrome.exe	83
PID 5828 wrote to memory of 3820	5828	chrome.exe	85
PID 5828 wrote to memory of 3820	5828	chrome.exe	85
PID 5828 wrote to memory of 4604	5828	chrome.exe	84
PID 5828 wrote to memory of 4604	5828	chrome.exe	84
PID 5828 wrote to memory of 5928	5828	chrome.exe	87
PID 5828 wrote to memory of 5928	5828	chrome.exe	87
PID 5828 wrote to memory of 4104	5828	chrome.exe	88
PID 5828 wrote to memory of 4104	5828	chrome.exe	88
PID 5828 wrote to memory of 1048	5828	chrome.exe	89
PID 5828 wrote to memory of 1048	5828	chrome.exe	89
PID 5828 wrote to memory of 1164	5828	chrome.exe	90
PID 5828 wrote to memory of 2476	5828	chrome.exe	92
PID 5828 wrote to memory of 2476	5828	chrome.exe	92
PID 5828 wrote to memory of 688	5828	chrome.exe	93
PID 5828 wrote to memory of 688	5828	chrome.exe	93
PID 5828 wrote to memory of 5316	5828	chrome.exe	94
PID 5828 wrote to memory of 1784	5828	chrome.exe	95
PID 5828 wrote to memory of 2896	5828	chrome.exe	96
PID 5828 wrote to memory of 4836	5828	chrome.exe	97
PID 5828 wrote to memory of 4836	5828	chrome.exe	97
PID 5828 wrote to memory of 5268	5828	chrome.exe	98
PID 5828 wrote to memory of 3808	5828	chrome.exe	99
PID 5828 wrote to memory of 5268	5828	chrome.exe	98
PID 5828 wrote to memory of 1816	5828	chrome.exe	100
PID 5828 wrote to memory of 1816	5828	chrome.exe	100
PID 5828 wrote to memory of 1268	5828	chrome.exe	101
PID 5828 wrote to memory of 1268	5828	chrome.exe	101
PID 5828 wrote to memory of 1600	5828	chrome.exe	102

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.adapting.com/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd9b2bc728,0x7ffd9b2bc734,0x7ffd9b2bc740
  2⤵
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,17395979448876516123,5972602294567910062,262144 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1500,i,10288899070371260231,10771100117371463597,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2176 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,8573135165358929425,4887745229366520223,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2400 /prefetch:13
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,17632914337070912547,16311572160413968568,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3256,i,13066231603125695592,13016946524894283755,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4124,i,12814389722715353432,11010263122493862732,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4140 /prefetch:9
  2⤵
  PID:5928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4772,i,12599236050800085948,861598745451794439,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4948,i,3378786918913635666,1826246774510620324,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5608,i,17255350135812799283,9642875725570870546,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5612 /prefetch:14
  2⤵
  PID:1164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3696,i,3527768276243749420,14946396501134747780,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4940,i,13270106707588051463,5616363732353750624,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4740,i,11546014655948392184,6990853423487775778,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5756 /prefetch:14
  2⤵
  PID:5316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4968,i,17883654669060084959,5135343300367844418,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5728,i,7569130417093291604,13802159192603510423,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4932 /prefetch:14
  2⤵
  PID:2896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4152,i,15783632037215058582,5278584627187494823,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4196,i,13511483027904069268,1118282533268595777,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4192 /prefetch:12
  2⤵
  PID:5268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4112,i,8455733900739438642,15028274417019219399,524288 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4116 /prefetch:14
  2⤵
  - Modifies registry class
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5764,i,16005514343340041653,5303116104676689211,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6308,i,1626528884064791442,17932042606518930569,2097152 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6404,i,11561233048623399571,10216646347691722428,262144 --field-trial-handle=2136,i,13457949813858374067,15620189493365299999,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6368 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1600

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3480

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a29dc7b87001fcf13a773b1ecdd88bf532322f8a1a45dc2a53087e3dd181b2be
MD5 220f5b5a1aa322c6dbb27c7e228aa91c
SHA1 609621130aafa6f8ebfbb7ec91fc94bf47bd5cdd
SHA512 ee2b764dbe1a6cf804c49690fe67fa2e5fc58b47664be0822adcfdc0afa7052b117f9b3669d04891cc84d036e5b48b14925272d76c9f0d410915920efce392bf
TLSH
T125E022AACD21AC3758FD8B5870544B82EA80171B3B82894F3B7C921C8FF4637529682C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 29ac74f2e607b9ba18e57f0df69e2272a6ccc9067eddc731e0dfeea4881e6163
MD5 a3bf94af174213b0f15308f6c65102aa
SHA1 594bd5794e28ea857214459f1eb07da8920f9ede
SHA512 200047f4594313b0f09972f856752698680dbbef61b1ba23b338d646de4bbe76f89040badb05bcb5e35435a9015b0be1c2752f9f41178c6e6f1a1ef807c047c6
TLSH
T10BD02223FABBA400DB250230D0CC28122F2029244F343BE893F00B50882283B620220D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 0953b6a21677b30948c0388581d46ed32e2833969f856cbcf30a7dd42d8fd86b
MD5 666574407df6f115ed1c18f1cd858092
SHA1 361c711600b6f3f53b3ce4fc040e1d7e24cc2400
SHA512 17d933ab5ffb5b31f604b693a3e4322c01c1747cdefd7b4abee25361d74a039d46a93e15321d5805a8cbe1b512a18ba9ff23c06cf3aec2e8c90adb4a8a7b8f29
TLSH
T19BF0D836F67FF000D33C05B0D58C558AEA5219164B347B8B8DF29F511027537E505109
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 840B
SHA256 db8b4ebd76821a37d80eddcc4d2a834cf467b89dc95041e194606323f0b402d9
MD5 f54375e2efd3e7bb3c562c34e3a06363
SHA1 3c00a64f34166e78d248d24d4f25c8478c18cf87
SHA512 8463dacee6b69f5b4ede7e4b20639fad4c33e0896d6a4bd69314812c4e020ad093862453d8c8f1dccf7117aba1eb47b81dbfaa0d1ace2c4a7c69d61ad552a4f3
TLSH
T18401993FF7BE7FC0C7280376D1EC1945B630104646322F9B4AE25B3411227ABC957105
MD5 SHA1 SHA512 TLSH

Submit Download

00f97c1e-e203-46ca-9b7f-d949450bf5cb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\00f97c1e-e203-46ca-9b7f-d949450bf5cb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 c40d09affedff067ccd565c19212e633c450ec7a3fa933f0fc4372ffb7c0fa24
MD5 fe2a7b1c3a4d85fe0fb712e0bd15b614
SHA1 7e872a72c61f4668301b026e202e1aef0f512515
SHA512 618281ee328b1e16a4328fbd6731cd8aa51e051bbc3f7c006a9318631a6f8aa170d8765d414cee6053380c5c884a1cd0da9de110252186cea82c5479eb422435
SSDEEP 192:DcIhtjZ6adaIaEd9FqMC3QngUCgMzWd7GUYR:DBhtjZ6adaIaEd9FqMC3QgUCgMzWVGUm
TLSH
T12FD1C0F7C3E8C56D891155F4AB166F1FCE2A0A28432C3C66C8D4BE5B93E2871E20475E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 17d336a3206906b758b6dd10bab3144687fd669fbf6089567da8d69dde3c54f6
MD5 5f94488668856703e3fb41d2ca0b0abe
SHA1 03d672c591d9bbf73773f189486012d0a9cb7af8
SHA512 b6866d992244eb413aa00741c13f79b8b608bfe227380b528413ac8fca1549017ec8a257c99de0881bf834ae661d198b7ab82f6eac1fa902cd0c6fb5819c3670
SSDEEP 192:DcIhtjZ6aFBSsxaIaEd9FqMC3QnwCgMjd7GUrInj2hP9rOxgk:DBhtjZ6aFBSsxaIaEd9FqMC3QwCgMjV+
TLSH
T1EA12A1F7C3E4956DC91155F4AB166F2FCE1A0918832C3C6AC8D8AF5B93E2471E20574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d3a638da9e59e5e67a4e268d94353fb24f3a7eae6e292cd07a2c3c346f0eb836
MD5 7b570d1dc051b1b8e323da9de6f33456
SHA1 663b5aebbe77e75b07f4c6ff08180360df67701b
SHA512 37a3c4fd0af04272ab09538d3e72e445732fc171252ceb487f4fba9940c8f1e36a08cda606b1766eb039988226937eddca0a0cabdf97c850a8b96df293cc2ed9
SSDEEP 192:nRYopBuavxEMWv7lpupAPRp24D4Fp6+9fHsb+WNl+zFi7GPCH82N4okxZokwAa0b:nRYo7iZgUXulRw0Bl26xqgaE2e
TLSH
T1A652C55BA910297B9CDBD32AF912BB57E3F9102426E41E84EFFC8A1C25D76CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6ca3c92c9420663c3c23dc706ead14f5314b119f391907ab53ac8b60ae28d0a1
MD5 8ba66c1dcd3a85616acf22a6fb119ea2
SHA1 799926e6457155fc49528503b21964848fd4976a
SHA512 be5c95a3f98481562741e1a48184226a913722a83ddda8a95994716e09dcc8dd827ce0c377a312f166187c29fa93f416e9ac8a4c344529e5e8d9f65298e09e0e
SSDEEP 192:nRYopBuavx3I7M6v7lpuptPRp14D4FX38C+9fHsb+WN+0Y+zFi7GPCH8+mt2N43M:nRYohIQWZgDXN4Rw+uBl52Zxqgao2E
TLSH
T1A662C75BE8202977ADD7D32AF912BB56E3F9102526E41E84EFFC8A1C15D76CC2213427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bd6fcf390ac5bf380c80310986a78d77264138d4a330f58efef5cb65cf65ec45
MD5 dd19ed6c8c7e7c1bc411cb81825ec935
SHA1 425af51b4e6165088d9347ef9069ebf0bea7e177
SHA512 48f508b853df6635c3f6c9c6377fe70ced2250f03423e6ee678a05b992521931161257cd25b03d43175086377aa5661a845ea2eeb5acaa61516525a62197f920
SSDEEP 192:nRYopBuavx3I7M1v7lpupAPRp24D4FX38C+9fHsb+WN+0Y+zFi7GPCH8+mt2N4yi:nRYohIQFZgUXu4Rw+uBl52mxqgaG2E
TLSH
T1C962D65BE820297BADD7D32AF912BB56E3F5102526E41E84EFFC8A1C15D76CC2213427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ccc72a2c8225eb1374115fb002b5408411ed0090857e0a2a7a7073f995d16a3e
MD5 54ce4562fe818cd09741875e8a1ef411
SHA1 5f3a321810a782ff6db298c515a0c683bbdefa49
SHA512 d0f5ac7f29e1c28d0138b63cf209769b0ebaede4c403b49d40c5e22a2d6b00a171ceeb73c11502c049b2f31169fccee6af7726dbf81dd6a5f15652d72f4d2838
SSDEEP 192:nRYopBuavx3I7Pvv7lpuptPRp14D4FX38C+9fHsb+WN+0Y+zFi7GPCH8+mt2N43M:nRYohIDnZgDXN4Rw+uBl52Zxqgao2E
TLSH
T1B362C75BA8202977ADD7D32AF912BB56E3F9102526E41E84EFFC8A1C15D76CC2213427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 457419555436665f3ae7de00950cda6090dc8fa23e83a24333ffb7d4fc372a65
MD5 d2325f2c6232a8d9e83f6c1b4ed6758a
SHA1 337188f7053a965a6fe2817d9341b839aab2e724
SHA512 38f5946aa574f53f9be0c4c87c3322afa5a94fa3bf6b1204a4df49dda9b2a3cb7f2c4505ad88feb684c25ce2b60239935690d2356182f1b8bda9eefb1a1d9211
SSDEEP 192:nRYopBuavx3I7Mev7lpupAPRp24D4FX38C+9fHsb+WN+0Y+zFi7GPCH82N4okxZb:nRYohIQaZgUXu4Rw+uBl26xqgaE2e
TLSH
T1F852B55BA920297B9DD7D32AF912BB57E3F9102426E41E84EFFC8A1C15D76CC2213427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 a5b8650151d2451032a791133132f242eca423ba62ebf6951ee762f3a65eca3c
MD5 2b4e236f9e83b616cc8f581db2f3bdcd
SHA1 cf63d1e0670e8284c0c24f3c4e79f91fc77b8d84
SHA512 1479ae15a6a998e3e3ec499b27898c5f2b286819f2c8ec195655cbf915e8c118348a0209ad99d63b05857c9cf527795681d59b2974e64c3ccb88095270a8c87e
SSDEEP 192:nRYopBuavx3I7Mtv7lpupAPRp24D4FX38C+9fHsb+WN+0Y+zFi7GPCH8+mt2N4yi:nRYohIQNZgUXu4Rw+uBl52mxqgaG2E
TLSH
T19662D65BE920297BADD7D32AF912BB56E3F5102522E41E84EFFC8A1C15D76CC2213427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 9f38e19a25eb2f476bb13c92b5bd25f8f81d1f181913371e143650d88f572502
MD5 7c27493e30d3e55fd9d699e101255e90
SHA1 88aa4ce54011a20e270439d90b25275e173e1037
SHA512 44e8865564ed0a3b6d57a828041c0313b39b42542acce49a9f28d1b138c9786d16e50bdc032b6f7adb8d4eaf1d22e02a0f83430755d81d6262be7e6050a9b1fe
SSDEEP 192:nRYopBuavx3I7oHv7lpuptPRp14D4FX3TC+9fHsb+WN+0Y+CWFi7GPCelemt2N4s:nRYohIsP5gDXNrRw+SB1Z2Zxqgao2E
TLSH
T18B62E85BA8202977ACD7D32AF912BB5BE3F9102516E41E84EFFC8A1C15D76CC2213423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 51920797eab7a0d1e540658f9033fd5342bfef615204493d2172597af35da48b
MD5 7489501a23d46ac0e98c2f9bd8dd2ab8
SHA1 8225da7d9f4dd14f1af2a71cb15a78fc39271734
SHA512 3970bfb64a603247c35566dd4fba2688d037d4c3b4e9fedb61019f0f8b1c3be4bb1003bf7c951f07e7ec13fc77f5ac380890b7ec6d6f4457127e4b13348c45dc
SSDEEP 192:nRYopBuavx3I7oCv7lpuptPRp14D4FX3TC+9fHsb+WN+0Y+CWFi7GPCipGmt2N43:nRYohIsO5gDXNrRw+SBlh29xqgao2vT
TLSH
T17E62D75BE820297BADD7D32AF912BB56E3F9102526E41E84EFFC8A1C15D76CC2213413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 79ea521d9f3df87d24eec0f3607ae01ff8cf6eaeb5c7802f7c4721f58b8ddead
MD5 5d35f09b8c86835fb4877dcd0cc40e4a
SHA1 71d399e3fd153dc456fddb8f9cf7b1d428dcd2c7
SHA512 68050d4d5a4a4f94c2a29dfff1edf5350066ef5a2e47ef11dcbd09970c2009d28d7804e59c25d64e43ef8e1367105d32e929bef6a7a0e31d18837b193891b321
SSDEEP 384:WQjb+7KxkXqKf/pUZNCgVLH2Hfgsl5g7pLuLcSjQRXODaB+ErU39rHGQ3uKHaaK7:WUb+7KxkXqKf/pUZNCgVLH2HfgsLg7pn
TLSH
T1BF72F967BC4C9A370F94C6CDD8267A4FADB5024B65DD886483FA982903D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 e2d0b1b4020df1f29161920c4004b5316d8cfb7786478a5d442477d74b432ca9
MD5 6108eaf59392ae9009a0e4f4a732df23
SHA1 110ec1f5d7409deb80d7a51ba92476ba5d8e294d
SHA512 293c3d94bb94403e6d777089aaba6aaae21b9b19fad89b0ffb9da545e73529d28f08b15e13b78557fbdf4309ff01634b7f3c09a3ad6427e295e6edeaf88424a2
TLSH
T1CBC01251C4066141C05E03F4295394DC7154DFB8E75B3368AAF4AD56EC35621802D75D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bb9a.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bb9a.TMP
Size 96B
SHA256 f342dbe0639bf72f9f83c598cf4a39b9b39879d3d42cef89f8952d8244f45b23
MD5 f6cda89c84065f6878b85c569762d6b3
SHA1 14c849115a8ba27ec3e94f4efe6db7b31e74a046
SHA512 38e040c0f3e3f80d69f3f00122747cb8691bb6c16efbc89f9c2904cb78bbedfd93b3d3a74e766d80b4a4da97c4a4819fa4c36e5911df4e87a18ce81e9c633e0e
TLSH
T1D5B00256C1036262C08643F03A9595D87178DF25C6072252D3F25A76DC25A72552E264
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 6ff72ce4e2fcc9e9b3493f6e6653f03e6461741e2049fb604ec20eb54752f298
MD5 3da1beb35a847ce1c4c34fef47532cff
SHA1 6b1749a541ef4532d35f31e546189f3f7a1192b6
SHA512 95a2e622a175be6bea3c1805ecb564c95855941c9415b19a77c6a5559245a19149786a45970ed8434731fd62414877fc158ef96476851c7f7eb0e1c113246dcc
TLSH
T15EA002108AD16CA5CA31527610CA024423A16850B20B9F03A4AB8144CC97A4C7F1A006
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 95daf1305763d3ba49720fc223b019fab4389a3e24a8713e82626849ec371e41
MD5 7bc2a4b2123f8965bd03d16f8c456e85
SHA1 4bb53ddf48d761081591eb6afaaa1ecca256698b
SHA512 5bb0d1abceb22cef6cc8a037803c9dc2bbbe7c00d449396659dc19225ee2775afc8907c824f3c9d639cc9e6967071b7daf22d2579de44f9437f5ded12fe0e5ea
SSDEEP 1536:n/ueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6mq:2DFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T105B30212CAAACE9BE4A45C79A4C413F3BEBE5F9563F1BA424166E4023DCE7042395770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3bef100c038c15d04a57b8d1b214492ccf3c963a8d0912cc3e12926b5ba1c09c
MD5 c8e32938971f2b9fb32f769224bb2e87
SHA1 677d9131b9c0acc449eba30be904f779c6aae0b3
SHA512 9668ed70d2497d801b6b35a33a81e1f16585d6c3593646ffc85995a7a8969aabd5d20081406bcf05617871c20c780deb362fc4b24ec159b8c5628739828016b8
SSDEEP 1536:rM/ueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:I2DFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T194C31212CEAACEABE4A49C79E0C517F3BEBD5F9527F1B9428166A4023DCE7041395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 156KB
SHA256 d09b614b584379f0f9c4a59478433e93028c9db21b4058f5dcff9d415e310f85
MD5 daf54f81e7c744ebe1ee78219589b317
SHA1 1c7327e2441f0fd6a5c6bfb97c8b60bd84c6cb57
SHA512 64fc46b4e3e12cc7d501fc24316f3c89ba267388f3548ad439fb54f62e7b3d9cf7772a37d105666447a926f236658c3dbf3d15a010f5c816ad875263f321eee3
SSDEEP 3072:x5OCnpra28RVjsUSTtDFpmzNA9J+zfAsJDREge7oWg+95hy:x5OCns28R1sU8jf+zfAk3Wbhy
TLSH
T169F312268B9B8E9BD9F49C39B1C007E36DA94EC567F1AC0342A7F91229CD64913A1734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d124d198dd1b98a1f7ee9b156580c79da04c96af30dc2e1981889219fe9265de
MD5 a5a63fddaafad281fdc0aa5bf7979cc1
SHA1 9940768608b1de15862478de1f5d14d6ddd13374
SHA512 81e4c89bb36f2d62e209ef240ea053d54e9bc9bff19ba315a4b2954f1d8b51f8def4b89b4ad01d0960ee609d7d2861485183f33a04d50a5eaf32e52c98183b8d
SSDEEP 1536:AM/ueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6Z:N2DFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T167C31212CEAACEABE4A49C79E0C517F3BEBD5F9527F1B9428166A4023DCE7041395730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download