Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    12/07/2026, 04:57

General

  • Target
    BotMonster_v2.8.zip
  • Size 4.2MB
  • Sample260712-flcsfacz5j
  • SHA256 4cfe278f7f93048d0e247a301f43fdfac738ac3e5b62c8d445d7f5241c69103a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 45 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 57 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\BotMonster_v2.8.zip
    1⤵
      PID:4804
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3368
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:2620
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbdfb4c728,0x7ffbdfb4c734,0x7ffbdfb4c740
          2⤵
            PID:3332
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,4530944447475334798,13117338794685849667,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2228 /prefetch:3
            2⤵
            • System Time Discovery
            PID:652
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,9430498328478438914,4880636484797883072,262144 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2004 /prefetch:2
            2⤵
              PID:548
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2248,i,2198888076119292327,15029925808900071891,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2588 /prefetch:8
              2⤵
                PID:2116
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,17536455527514798140,8561105752431576496,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
                2⤵
                  PID:3688
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,948785963818782121,3896726785644789611,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
                  2⤵
                    PID:3180
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4504,i,3249723088592268386,13940183747837286126,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4464 /prefetch:2
                    2⤵
                      PID:4476
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4744,i,12170612940694974362,16299428325602657715,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4644 /prefetch:1
                      2⤵
                        PID:4328
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4944,i,7459980300563906938,14133529416586116515,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4952 /prefetch:8
                        2⤵
                          PID:4880
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4900,i,17964028515915715550,12924416719477866670,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3968 /prefetch:8
                          2⤵
                            PID:2644
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,8509789806878373300,335202691978634014,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
                            2⤵
                              PID:1204
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5780,i,9593817668889737541,6868949858892801154,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5620 /prefetch:1
                              2⤵
                                PID:1132
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4768,i,17984711966168503767,13201720152524416658,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:1
                                2⤵
                                  PID:4196
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3276,i,12069051981102702766,12313754834231109052,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3300 /prefetch:1
                                  2⤵
                                    PID:1160
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3432,i,746882794646554191,9282458453897589101,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:8
                                    2⤵
                                      PID:524
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,6306581985056362718,7255916056022825789,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5900 /prefetch:8
                                      2⤵
                                        PID:2028
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,8529081379227557996,11967306887840691367,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6304 /prefetch:8
                                        2⤵
                                        • Modifies registry class
                                        PID:4240
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6268,i,9621972192618091763,9454198436334439489,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6544 /prefetch:8
                                        2⤵
                                          PID:4528
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6528,i,17912944287808104323,11601744312119001886,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6396 /prefetch:8
                                          2⤵
                                            PID:2028
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6532,i,17465430950846812701,5604420952293633627,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6440 /prefetch:8
                                            2⤵
                                              PID:5532
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6624,i,18438243486555110100,12633337299253523678,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5768 /prefetch:1
                                              2⤵
                                                PID:5972
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6224,i,2793769292380040869,6851740013919653695,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6664 /prefetch:1
                                                2⤵
                                                  PID:6108
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6716,i,4419236920975135450,4901136310005585234,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:1
                                                  2⤵
                                                    PID:6140
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6744,i,6221968327854826686,1189599474660615501,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6728 /prefetch:1
                                                    2⤵
                                                      PID:3400
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7228,i,14479901041975253368,6829373883980597102,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7244 /prefetch:1
                                                      2⤵
                                                        PID:4424
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6736,i,8910292959385648592,8012780226011801652,262144 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6704 /prefetch:8
                                                        2⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:4272
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6852,i,8571655343687183681,10517738802607090547,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
                                                        2⤵
                                                          PID:4884
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6952,i,1859301083422906903,17189611217720690137,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6692 /prefetch:1
                                                          2⤵
                                                            PID:4116
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6704,i,7542958744288191398,9958098889100642026,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6740 /prefetch:1
                                                            2⤵
                                                              PID:5624
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7432,i,6961849885495643512,14337700703495451399,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7396 /prefetch:1
                                                              2⤵
                                                                PID:432
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7460,i,18073652809546310477,10301075014472092143,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7500 /prefetch:1
                                                                2⤵
                                                                  PID:5708
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7552,i,16183697485969792570,12990050799037156871,2097152 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7760 /prefetch:1
                                                                  2⤵
                                                                    PID:4136
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7640,i,4340844188641726010,16953295135359605611,524288 --field-trial-handle=1792,i,17072492694160902751,5106791870197005983,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6852 /prefetch:8
                                                                    2⤵
                                                                      PID:5504
                                                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                    1⤵
                                                                      PID:4528
                                                                    • C:\Windows\system32\svchost.exe
                                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                      1⤵
                                                                        PID:3300

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                            • Size 40B
                                                                            • SHA256 2679ea0b96f43ded4259ee6860a268fadb58a37d12e7d2bb1fd0c13e50b20120
                                                                            • MD5 SHA1 SHA512

                                                                            BookmarkMergedSurfaceOrdering

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512

                                                                            BrowsingTopicsState

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                            • Size 414B
                                                                            • SHA256 0011b8c302d04b8f668860b32b90a3c556ebab228b099e26b60873899bcdc8bd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            f_00001d

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
                                                                            • Size 57KB
                                                                            • SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00001e

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                                            • Size 651KB
                                                                            • SHA256 186ffaa3cd8f6cb8ce8c879b98bb71675b06b9fd9769bc54c1d428cc34ec1465
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00001f

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                                            • Size 22KB
                                                                            • SHA256 375b8c6fc4a5d31a804ab0fba175fbc5a9d568dcf8c901397b4ed9b57e44ba23
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000020

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                                                            • Size 34KB
                                                                            • SHA256 b06e9b1c574343a660c052bd4ead7cd86194e3ea4fca5f79c634a3ffcf2129f6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000021

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
                                                                            • Size 275KB
                                                                            • SHA256 00a851eef36f141defa96f58e11b12f522c6330f7813bf0c679a9ddeb106dc9a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 1KB
                                                                            • SHA256 f02fa93c3f62f57949f7783a64b24860148b5af62164fe24349a3290ccbfc057
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                            • Size 1KB
                                                                            • SHA256 8abc513579a923cca27f909b7e5fbc25bbea644d2f73ece61d6dd031e536922f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            000011.ldb

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
                                                                            • Size 17KB
                                                                            • SHA256 75c82080775f0a4dd773686d6afd60c4e591afac5fa762c8b267e03e06a7ed9a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            000012.log

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000012.log
                                                                            • Size 170KB
                                                                            • SHA256 483bb0ed634d29e573443318e5d3e485ed7a2b1b0f21056985b9d7e82590eaa3
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            000014.ldb

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
                                                                            • Size 12KB
                                                                            • SHA256 0de356772e84ecef749c5728da3bdf6535b47192d6f9182e1c223bf57d1dd641
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            LOG

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                            • Size 4KB
                                                                            • SHA256 30c9f18eac70aac6674a7c8a2c60aa1c7bd0e42419f66cc909965ffca1e86c66
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            MANIFEST-000001

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                            • Size 774B
                                                                            • SHA256 91fad829ac5c4411ffa531d72d7d56acf5a3a714808525050d4b974f15a9bbdb
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Network Persistent State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                            • Size 15KB
                                                                            • SHA256 ec4efc253a5609bda50fddd709d55ad3b0d6e6899aae00c1c09dd66809adf337
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            SCT Auditing Pending Reports

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            CURRENT

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
                                                                            • Size 16B
                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                            • MD5 SHA1 SHA512

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 14KB
                                                                            • SHA256 90a3d566692e600e2ab2b27b856629bd1c432ecd7941e6d08edabf392cb987e8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 14KB
                                                                            • SHA256 72a93fc5c0d375dd654f0051f6ad0bc2c4180c2c8e13d95aa589ff4cb351c51e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 14KB
                                                                            • SHA256 e13598d4e397bd6b92f5e40c01f6806b82af04dbee40b2f21ee5ca389bbdd27c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 15KB
                                                                            • SHA256 c08885688b50f3cbcbeb163beccc29e1dd1ea934f2053f1c192594f914492158
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 13KB
                                                                            • SHA256 74adcefb3da2fda1de6bcdb56d8b45f0ff0e01188f766bcb3d7f3fee70a8b0a9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                            • Size 12KB
                                                                            • SHA256 d74f1eb25599adc01641fdc9b6a0d78e2b39a0b2c0a0fdca2b8c5778f5ce1bb8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Secure Preferences

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                            • Size 17KB
                                                                            • SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\26433db2-77c2-416e-a6e9-5a5c9bcab7c1\index-dir\the-real-index
                                                                            • Size 2KB
                                                                            • SHA256 3567c4f3789b885785cfc8f805b76e76495e04615d3c4890b2956e24cfea05c6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\26433db2-77c2-416e-a6e9-5a5c9bcab7c1\index-dir\the-real-index
                                                                            • Size 2KB
                                                                            • SHA256 bf7230f5a0e7b50f89b89cc41c93dc1537e0ac9f4b60c6368bc6134d21c7d71c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index~RFe590af3.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\26433db2-77c2-416e-a6e9-5a5c9bcab7c1\index-dir\the-real-index~RFe590af3.TMP
                                                                            • Size 48B
                                                                            • SHA256 ba388960d23283d3a72337d67bc389e2678ccac149ee5da5d04149856cae1839
                                                                            • MD5 SHA1 SHA512

                                                                            index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f324a9b7-bdff-4235-9ec6-230158ee4da7\index
                                                                            • Size 24B
                                                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                            • MD5 SHA1 SHA512

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f324a9b7-bdff-4235-9ec6-230158ee4da7\index-dir\the-real-index
                                                                            • Size 576B
                                                                            • SHA256 525be6b4f174e44322474b7ca0fe0792c44c0a07da8317a1d8966864b9766f5d
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index~RFe5965b5.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f324a9b7-bdff-4235-9ec6-230158ee4da7\index-dir\the-real-index~RFe5965b5.TMP
                                                                            • Size 48B
                                                                            • SHA256 7260d608d3019512cc84b1efa527ac2d4f236258fbc6656748970409164810d8
                                                                            • MD5 SHA1 SHA512

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 383B
                                                                            • SHA256 d558b103370b6ad299a271a1359987ca36d7559f6bd652bb228e4f8dbb1549f1
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 214B
                                                                            • SHA256 6d4de2efbfed3e6b8c28024acab37a8bc44be0de734ee7880d91c37c4db30136
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 216B
                                                                            • SHA256 c1427a4191d6145658851338a8b81c1f1bdbb3a84bc95fb446f2543c0764a2ba
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 243B
                                                                            • SHA256 306e7e6d23c3471b925ea3a3cac0655cf25adbab42a54420516eba1f0641f235
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 390B
                                                                            • SHA256 90bd423b75856f8ce8e3af847176edecfd86ce4c8f0e61955d062c643281cd4f
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 130B
                                                                            • SHA256 adc0cb48a42cd08477f205cb33ea48ebc12d5602d92355fa59944e042ab09325
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                            • Size 132B
                                                                            • SHA256 a4d2b61d47af67eae81d1f9d7b99323e449083595217417ccaf8a6a258e7c558
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt~RFe58fbc0.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58fbc0.TMP
                                                                            • Size 137B
                                                                            • SHA256 15b26ad7485bb1dba316d91a5c7a2c65d22938595aed219cb3617449ed7e8867
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 168B
                                                                            • SHA256 aa266df11ce2183c9af3c7330dd9a09905915b375d7ba90a72c2ad35f8d8653c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index~RFe595e62.TMP

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595e62.TMP
                                                                            • Size 96B
                                                                            • SHA256 074fe97c01bf0e0087a203f80aafe5af6caa0af0a64e4a7226420b4bee95cb1a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            3eb05b0e17da7265_0

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\3eb05b0e17da7265_0
                                                                            • Size 63KB
                                                                            • SHA256 7f566eb867af9d017d2f44a7d03d613b8711a5c5f500c09ffe64e94a5830b34e
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                            • Size 96B
                                                                            • SHA256 81660840d328fd5b33962028ffba75fd3cc8c620794ab7b0862394afa420587c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            512.png

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2620_13894887\Shortcuts Menu Icons\2\512.png
                                                                            • Size 9KB
                                                                            • SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            512.png

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2620_13894887\Shortcuts Menu Icons\Monochrome\0\512.png
                                                                            • Size 4KB
                                                                            • SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            512.png

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2620_13894887\Shortcuts Menu Icons\Monochrome\1\512.png
                                                                            • Size 7KB
                                                                            • SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            16.png

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir2620_210414760\Icons Monochrome\16.png
                                                                            • Size 257B
                                                                            • SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 233KB
                                                                            • SHA256 9cafad5a08849c5ebc56bf86853e99718877c0112f15156081b0b223c173f393
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 115KB
                                                                            • SHA256 13ac02804348a713ac9a63419fd549ab48f3a478844d552d3214a01251ddd238
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 232KB
                                                                            • SHA256 b1fa11e73a345cde2229ac13db398945cc12706606431cd6e968c89ae274e6f7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 233KB
                                                                            • SHA256 32286f9b88f2688bb63d4509be853b6db5cd473116f82462e2e662ae72a57f1b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            Local State

                                                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                            • Size 232KB
                                                                            • SHA256 facfc42e7138464dfa83652a1088c5ffc37c46caecbb70c807c094bca3577431
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH