a722fbfaa1e3032080c5e148f02b7ee7dc5fe0be21a3442e3fdaf77f930c244b

Resubmissions

12/07/2026, 03:59

260712-ej7pcscx9m3

12/07/2026, 03:55

260712-eg1s2acx8m1

Analysis

user interaction
yes
max time kernel
195s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/07/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
af
Size 130B
Sample260712-ej7pcscx9m
SHA256 a722fbfaa1e3032080c5e148f02b7ee7dc5fe0be21a3442e3fdaf77f930c244b
MD5 1900948863b79590b8d6b73c1fda73d8
SHA1 35265a27daca9ca109f8895e1aed97ac10109970
SHA512 950d78aa47f58af86176a23cc0f5fcda10bf7d93899b2e15ab87ef5f9ae81d27679a196b4b06a99dc6e6d2efdad4f2b1306a8cb2e02f518cfd6b7c764e0af4d3
TLSH
T126C02B0D458202101590A01460204F411343A8328B5043D44C0C423F70390602976104
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2284	chrome.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134283023790889109"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 25 IoCs

pid	Process
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
2332	chrome.exe
2332	chrome.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 25 IoCs

pid	Process
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe
Token: SeShutdownPrivilege	4024	chrome.exe
Token: SeCreatePagefilePrivilege	4024	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
4024	chrome.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe
5032	taskmgr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4024 wrote to memory of 4972	4024	chrome.exe	89
PID 4024 wrote to memory of 2036	4024	chrome.exe	90
PID 4024 wrote to memory of 2036	4024	chrome.exe	90
PID 4024 wrote to memory of 2284	4024	chrome.exe	91
PID 4024 wrote to memory of 2236	4024	chrome.exe	92
PID 4024 wrote to memory of 2236	4024	chrome.exe	92
PID 4024 wrote to memory of 4476	4024	chrome.exe	94
PID 4024 wrote to memory of 4012	4024	chrome.exe	95
PID 4024 wrote to memory of 4476	4024	chrome.exe	94
PID 4024 wrote to memory of 4012	4024	chrome.exe	95
PID 4024 wrote to memory of 4696	4024	chrome.exe	96
PID 4024 wrote to memory of 4696	4024	chrome.exe	96
PID 4024 wrote to memory of 988	4024	chrome.exe	97
PID 4024 wrote to memory of 988	4024	chrome.exe	97
PID 4024 wrote to memory of 3000	4024	chrome.exe	98
PID 4024 wrote to memory of 3000	4024	chrome.exe	98
PID 4024 wrote to memory of 3840	4024	chrome.exe	99
PID 4024 wrote to memory of 3840	4024	chrome.exe	99
PID 4024 wrote to memory of 1824	4024	chrome.exe	100
PID 4024 wrote to memory of 2488	4024	chrome.exe	108
PID 4024 wrote to memory of 3628	4024	chrome.exe	109
PID 4024 wrote to memory of 4876	4024	chrome.exe	110
PID 4024 wrote to memory of 5064	4024	chrome.exe	113
PID 4024 wrote to memory of 5064	4024	chrome.exe	113
PID 4024 wrote to memory of 1712	4024	chrome.exe	114
PID 4024 wrote to memory of 1712	4024	chrome.exe	114
PID 4024 wrote to memory of 1576	4024	chrome.exe	115
PID 4024 wrote to memory of 1576	4024	chrome.exe	115
PID 4024 wrote to memory of 4016	4024	chrome.exe	116
PID 4024 wrote to memory of 4016	4024	chrome.exe	116
PID 4024 wrote to memory of 3360	4024	chrome.exe	117
PID 4024 wrote to memory of 3360	4024	chrome.exe	117
PID 4024 wrote to memory of 1376	4024	chrome.exe	118
PID 4024 wrote to memory of 1376	4024	chrome.exe	118
PID 4024 wrote to memory of 4348	4024	chrome.exe	119
PID 4024 wrote to memory of 4348	4024	chrome.exe	119
PID 4024 wrote to memory of 2932	4024	chrome.exe	120
PID 4024 wrote to memory of 2932	4024	chrome.exe	120
PID 4024 wrote to memory of 5028	4024	chrome.exe	121
PID 4024 wrote to memory of 5028	4024	chrome.exe	121
PID 4024 wrote to memory of 4516	4024	chrome.exe	122
PID 4024 wrote to memory of 4516	4024	chrome.exe	122
PID 4024 wrote to memory of 3616	4024	chrome.exe	123
PID 4024 wrote to memory of 3616	4024	chrome.exe	123
PID 4024 wrote to memory of 2712	4024	chrome.exe	124
PID 4024 wrote to memory of 2712	4024	chrome.exe	124
PID 4024 wrote to memory of 1752	4024	chrome.exe	125
PID 4024 wrote to memory of 1752	4024	chrome.exe	125
PID 4024 wrote to memory of 1028	4024	chrome.exe	126
PID 4024 wrote to memory of 1028	4024	chrome.exe	126
PID 4024 wrote to memory of 2992	4024	chrome.exe	127
PID 4024 wrote to memory of 2992	4024	chrome.exe	127
PID 4024 wrote to memory of 3416	4024	chrome.exe	128
PID 4024 wrote to memory of 3416	4024	chrome.exe	128
PID 4024 wrote to memory of 4768	4024	chrome.exe	129
PID 4024 wrote to memory of 4768	4024	chrome.exe	129
PID 4024 wrote to memory of 2664	4024	chrome.exe	130
PID 4024 wrote to memory of 2664	4024	chrome.exe	130
PID 4024 wrote to memory of 4648	4024	chrome.exe	131
PID 4024 wrote to memory of 4648	4024	chrome.exe	131
PID 4024 wrote to memory of 1376	4024	chrome.exe	132
PID 4024 wrote to memory of 1376	4024	chrome.exe	132
PID 4024 wrote to memory of 552	4024	chrome.exe	133
PID 4024 wrote to memory of 552	4024	chrome.exe	133

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\af
1⤵
PID:2660

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb3669c728,0x7ffb3669c734,0x7ffb3669c740
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,16405737175481523540,3829392146720981588,262144 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:2036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,9032775593437359458,14123121723614179066,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1844 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,1648759130448195889,18383388058888210263,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,3520729340994084553,8627655437505625788,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3464,i,12816281804509378005,12554921037723552360,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4468,i,16873204870805710318,3122883528290195837,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,14757578135574058338,2066775505345381492,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4784,i,13195456124029338935,14283898073931911710,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3952 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5036,i,16788704781212180855,13375341248760961016,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,12712437148141684577,901736165699612831,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,11754475488640002430,12939938189960138411,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,2387247841704533397,16769195252776868201,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,10694293860668390510,266422832781867121,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4380,i,3671689476042160733,9947968543541160062,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4876,i,3450457704419381520,491529903666672183,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3500,i,13967032937410014312,16914964079201987533,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5972,i,6542432185025701688,14671614964605853093,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4836,i,14874197899746833189,13969177709844157088,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5956,i,5666417779243677944,3964905826842406250,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3500,i,4872359282488551049,12205130823099997869,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3660,i,8751199107275361824,15688358262052505439,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4780,i,17556020610176310976,8703834073967975487,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3600,i,3104026863835818210,474287618696831143,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3240,i,18337004475048391165,2867671721721290491,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4816,i,13562796192540728499,17943634479687763613,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=3616,i,7861086194700351278,10500743503285901942,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=4792,i,1258177536402407119,9849906206576279747,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3476,i,7836120906180446875,11556872970240409354,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=3528,i,3893684068817812009,747483792404654641,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1212 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=5564,i,2797554843801930650,10629306256192927622,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=4540,i,10246247692161538386,2480115258574709729,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,10301975827785357360,3229859682640653408,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3620 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=3612,i,13434342835703466900,16287533013263293939,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4724,i,12773989273443399515,2858636105802633153,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5960 /prefetch:8
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6116,i,5040690598569368379,11930800130341037235,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4520 /prefetch:1
  2⤵
  PID:764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=3964,i,7951495162159833328,10186959282531383005,2097152 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6056,i,14908948553009043805,11338259267716965315,262144 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,3544202779226313883,11075790774832161535,524288 --field-trial-handle=1980,i,8647225064012858099,4376869617823358714,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1308 /prefetch:8
  2⤵
  PID:4788

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1728

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:556

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 74dc581779303c4e8defc1e0ffba4d12bc3f3525137bfc84468c6bd6e7b87abe
MD5 de6a32404af2b95813d2a9e224af49e5
SHA1 a45f623cde0dcabfa036387fbec4173ea74f2c1b
SHA512 9851ea467ba6550f74e6b5f621a2b957061637b8768915c484679864441afab0fb537f66dcaea79a64788a8515187ba25bd7326af4a400694710ee3ea22ae636
TLSH
T17FE02BA6C863EC3B18FA0719B05857C1D755139B2B40894F7B3DC10C8FB16374685D1C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ac799668357d86e72e87079837f9f3f7115e109cc5a7e6cd3eeab081cda89fbe
MD5 285a129e7455c34fe56cb8ceae011ed4
SHA1 8a194cea2432144d1ed7cd57e1bd52886fa646b0
SHA512 b01d01d204a40e05697323eaf72829653af700cb7ac2b62f9b808e8b67c05b83c091ae97e02c57a35f5b4272de8b1d4d58fc9aec8a92af96f885cdfdfe7c59c8
TLSH
T19F617BF7D3E4856D891592F89B25AE1FCE6D0A24032C3C6688D4BE1F93F2872D20175E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 dee0c98730733a4f4baac7bbbfee2cf5ac7a499d701d7671317e3255e64b2105
MD5 15730d203835af35c685c4b133c3c2f2
SHA1 b8b14db838650192967a352cf6030d4e3015a09a
SHA512 8c46b69c4e39be745064cdd103a8455f5e7d36119f532976c2803d31556875fef939bb20eca10d10475e3a69c120fcba09851fbbde155f3053ea801d03d9c59b
TLSH
T1BC51ABF3D3E88A6D891562F49B21AE1FCD6D0A14531C3C6688D8AE5F53E2872D20139E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0049e1b0b9a86b6112f2542bb7fb84ad4043f4eb7072c994e4cb5cfb7d4a88c9
MD5 7aed1de3f5542fc777d14acd358d51a1
SHA1 ab9190815f912d429bf0857e27574a8a2f43b30b
SHA512 675731aa21dbd5a23ab5db59318db39be3bc72cff6878be77bae614f77840b1a962b9b2c9898f18fc6b02a5b79f2c081406c0b41ad8dfd27e7ae95d04b44f297
SSDEEP 192:RRYX+/E8fqGv70pAPRp2dj9+Hsb+WNnoH07X6kwrrVyIsnAUgtaJ:RRYX0dqygUX68wA0z6x8
TLSH
T12842C62EAA10697B6CDFC229FD6177A3D7F6102125951E48E7FCCA2C19D75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 f87390fb5658f1ace5cd0ff088fc401e5f600132e75c56d442ee2be2c7b5a474
MD5 dedb79f91ef26cb908a6aa82bf9ae4be
SHA1 c76a1cd78122eb3b2c750da52b041d77d6cfd2e0
SHA512 511b82ac6575960c3e2561a9477eb162627b1ca1de3ca0968aebaf513f3d041ef150d82ab0adea57029cc49af7eddf9db831ca56c0046801e509010f8a804b4b
SSDEEP 192:yRYX+/E8f4Pv70TKPRpIdOpu9+Hsb+WNEnfkV6Jm/0ExX6kwrCVyIsnAUgraJ:yRYX0d4HgYXi8whCZER6ee
TLSH
T19952D82AAA102A7BACDFC229F861BBA3D7F6102125D51E44E7FCCA2C15D75CC321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a199a75ab9e4b3ff5245c9ad33242b23a20bfc70c005ca7f8dd9fb225dac5bdb
MD5 3c3c69596c52daea17e65bb88582eae6
SHA1 06984433226019954d3e348d1121990613c1697d
SHA512 a5aaf470ff5cfc240258261714556ccdf33eff5f9fbd0b063db671fdb7315902dbb6bd78d7fab4fd1474c04e7c13b171ce05dfd573daef878f5e4810bb241d47
SSDEEP 192:RRYX+/E8fygv70pAPRp2dj9+Hsb+WNnoH0oX6kwrAVyIsnAUgraJ:RRYX0dy8gUX68wA0K6Ae
TLSH
T19642B62EAA10697BACDFC229F9617B93D7F6102125D51E48E7FCCA2C15E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 946159d6c9d02ea72541765c66630c53828bf4b7d3a0ac25a28d9fd4114b1fe3
MD5 1a1094b22df050977561cb45cbb118d6
SHA1 c04272aa66a7e28e044b19400d600e5364044e3e
SHA512 b36c967f3bfc3fa6ffeb7bab236ac17a805ecfead27906377bcaa021a217a6a7b0919df00540945ab410eed16f1a19cfbf8a96f7f193d973fd604ad000d712e8
SSDEEP 192:RRYX+/E8fiPv70pKPRpIdOp39+Hsb+WNnoH06Jm2t2wX6kwrCVyIsnAUgraJ:RRYX0diHgeX78wAPp2i6ee
TLSH
T13F52C72AAA105A776CDFC229F861BBA7D7F2102126D51E48E7FCCA2C15D75CC321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a51d2a77317bd601ee4cfc1e751fbeee1491f99e99048a3655d400ef97a64f52
MD5 377a9c85aab7cdab61cdb783f88a7bc3
SHA1 1e973fa35e6454231ed871903eb936a5aefd2fa9
SHA512 33f5cccef1c85cee47e842c8ff1569b208b9ad6fa5f7ddc23f0a9665e4e02fc78b8e332c3048cdd6705e57169c8c7f95c6605e3ee0b6a91907bb829dcc09d3e8
SSDEEP 192:RRYX+/E8fOGv70pAPRp2dj9+Hsb+WNnoH07X6kwrrVyIsnAUgtaJ:RRYX0dOygUX68wA0z6x8
TLSH
T12C42C62EAA106A7B6CDFC229FD617BA3D7F6102125951E48E7FCCA2C15D75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5ae72795ae606484b7afb3298a79f071bc27f39bc390bc3cde222123f4985a58
MD5 e3506d1d0f65cd3903c96828c8e34844
SHA1 728122580b2c49951acc064da7af02fb4816a106
SHA512 463fd4cfe3ed456f12751b1688c114c71b94375489ef7a7cc0e2923ddf3335b1e55c6197d1589e51bacfd5975ac740a0d2e03b3bfb1481afa6fb15d75fb35e83
SSDEEP 192:RRYX+/E8flPv70pAPRp2dOk9+Hsb+WNnoH06J22X6kwrAVyIsnAUgraJ:RRYX0dlHgUXY8wAP2I6Ae
TLSH
T19452C72AAA106A7BACDFC229FD617B93D7F6102125D51E48E7FCCA2C15E75CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 4901dd4752a3ebfa3a9cda0752d55314f2bf8b63c941cd511871eadd6b6eead7
MD5 09599f2fce6dd08379cab363a163fa17
SHA1 f1957def02e36930ba967f25552232f7c531f6d1
SHA512 cebd3e22450516b7ff95a4b7788bbec8e1c6d92c570daca9989a9b2e284eb9db7370dd0cda234d7f1cf7a75259a29342669fa3eaaf8a469456396de40eb96ce3
TLSH
T13EB01240C1059581C05303B011861488B1145F10AA0B270943E4AE32D82A5A284141D2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b1b7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58b1b7.TMP
Size 96B
SHA256 f21dc02951548b7d2207d904881c6314a630a51504457190f31cf6661d0de66a
MD5 31b65afab264480df60e57cd99cc90cb
SHA1 6b84e7b50091e87ef732fa84e3d4964c5a0936db
SHA512 b387e47ffa61fea0ba901488577b7b70ffab5003db598d2f8bafc0b2e942da030bdb6eaba1b69dffb16ed4576c161e9241a3ac7da6dbd73274d2e001efaf2720
TLSH
T1CCB02220C3023202C0032BB0308082E8F0A0CF20C2030322C3F02E22CC22AB00222030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 ccdcc8669b52a0b9bca397c4226f05b803fb174a2440464a22f700308e710a94
MD5 6a007932b70aa2976586c9920f0d4797
SHA1 9d1599b18c365ad28a35af99bd7a171fd64a4083
SHA512 75a19bc0ddd31b631c8655269aa89a11068ddcf8248b8dd02769741af8299f1b49ceaa6f42aca9c28fb44e70cff7e7fa6e02ac93c09f33940b4d52dfdd53b11a
SSDEEP 3072:KLVLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5eNqfd7NtZL8cHQRZEQ6Spsc:Ku7WmVGS2WkNRdYANqZ/ZLW3Exc
TLSH
T1FD341237AFD20F771E56967876471F273BB38C9AD164C209EF6C3B9B58035A428058AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 925425cdf88d8a2cabe9f36a9ad681330db5ef930f5a082872f647e6495044dd
MD5 f969a4c9c9cc30b7b45d9f88dfdfc47d
SHA1 1d0dfcf37ab0ecee245796addca61ec7ca393e67
SHA512 2af24aaa6f6ad2a0bdc27600598b36b71c1fd5f5f9a5b44f831f439a4cedd5013dff1f43d0f68c0d32b51a4b8687c2fae8e4f966135c3f8d0cbc2b59dc630dc1
SSDEEP 3072:yLVLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5eNqfd7NtZL8cHQRZEQ6Spsc:yu7WmVGS2WkNRdYANqZ/ZLW3Exc
TLSH
T1E6341237AFD20F771E56967876471F273BB38C9AD164C209EF6C3B9B58035A428058AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d352ba8bb92a16bb03ce952de18adeb00ef920cd689a6814f620a6b71d8b51a7
MD5 71cc3d036d33b6e798492fa831e16d4f
SHA1 785a594fdf8ef893d9c26ee1d0d8c243efdabb7e
SHA512 a58b20e48f097998bc974464035f4fde8a9257b834972cc78fe3903a49919ca5696b21a6641b0ba4666118af255088bb50ca53c67f0a4c21cf373e182cfcd47f
SSDEEP 1536:bTLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:lqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1FBC30237ABC21F339D93CF64B9134FDA57B644A99030D301AAAD37EB7C93591684249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 eb4dde06d7c909d07d976f348dfd0271841eb3a52370dc5d7ec548a7eba35cb1
MD5 42bc31821091e4ac412d668fd98a64b3
SHA1 b400664b881ba63217373f2b2f34f21843eb8711
SHA512 473f7ccdd177e6dc69d0a34a6a0e3d36f9b870d09cd5a78399e084b2642b2aa002aaaaf0a6d9aa3a2b0b77d8c4881010bc2ef0bd3c4b07e94ac3f6e4c2c59099
SSDEEP 3072:NbVLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5eNqfd7NtZL8cHQRZEQ6Spsc:A7WmVGS2WkNRdYANqZ/ZLW3Exc
TLSH
T118341227EFD20F371E56823876571F6B37B35C9990648205FBAC3BEB98435E429058AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 29cef0677bf7e23613320dc44f5e07aeca20b1324d1dd7f46e6d04dbadb8802d
MD5 61c22b48d7fe32678d29e79a63f6f6f4
SHA1 84e4f9c9b8a037909c9edd453a5126782f0dc4a0
SHA512 0649a079eb6dc1d39f33fef8c15f76516039c69c4ddf612987e3f8c308c86603b2a3c04deac8927f2bbe78fa6860e6530a1cba2365857f86cf7aa48ff1b7c5d3
SSDEEP 3072:8bVLZKc2P7Wmxbd0+91k3WDAMhLONNd1cyYrye5eNqfd7NtZL8cHQRZEQ6Spsc:N7WmVGS2WkNRdYANqZ/ZLW3Exc
TLSH
T1C0341227EFD20F371E56823876571F6B37B35C9990648205FBAC3BEB98435E429058AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5032-189-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-177-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-178-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-188-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-187-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-186-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-185-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-184-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-183-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download

memory/5032-179-0x000001D8E8FF0000-0x000001D8E8FF1000-memory.dmp

Download