433641e9b0b9452d4e4d1bd71cdb2b543c0b23617d2ac642ee4753b818eb6a8a

Analysis

user interaction
yes
max time kernel
1049s
max time network
1011s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/07/2026, 18:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5bea2678c7a188fe0ca82068395cf88c.gif
Size 976KB
Sample260713-w7tabaev3l
SHA256 433641e9b0b9452d4e4d1bd71cdb2b543c0b23617d2ac642ee4753b818eb6a8a
MD5 5ff1bc3b4207126ea1933d1658b09c06
SHA1 4e7cfc1a31a0a46b9aab1c6b9ec8537f8eee85aa
SHA512 c244838484f7bc2271197606df1a635ee9cc98ca0c2c2dad4f5e3731fe8b3177a25a1c3985eb6d2600a9bd956da33c00070227b084207f8f486941d27ef22bee
SSDEEP 24576:ZYsHhZG+vMWKowViOAa9/zvQQWNLI/46mgIX2+13V1+Dl:ZThYMM5Cqb4G4FXp+p
TLSH
T18525332E700946D07A0C008F5162CA153F0B1AD4D2F5103E5E74CE6DFB57AFAFAB2A66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
46	discord.com
47	discord.com
211	bitbucket.org
212	bitbucket.org

Drops file in Program Files directory 6 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\debug.log	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
740	chrome.exe
5356	chrome.exe
5872	chrome.exe

Checks SCSI registry key(s) 3 TTPs 7 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	chrome.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134284412675126158"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{75D83A74-405F-4DCF-AD29-242F230D923B}	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{66297AE0-D9DB-4182-BDB1-13EB865B1C55}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{78CBD068-ED6D-4A34-A00D-4311F079ABE0}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe

Suspicious behavior: EnumeratesProcesses 33 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5656	chrome.exe
5656	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe
5028	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: 33	3824	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3824	AUDIODG.EXE
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe
Token: SeShutdownPrivilege	4228	chrome.exe
Token: SeCreatePagefilePrivilege	4228	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4228	chrome.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe
4200	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3912	CredentialUIBroker.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 4280	4228	chrome.exe	83
PID 4228 wrote to memory of 740	4228	chrome.exe	84
PID 4228 wrote to memory of 3256	4228	chrome.exe	85
PID 4228 wrote to memory of 3256	4228	chrome.exe	85
PID 4228 wrote to memory of 2672	4228	chrome.exe	86
PID 4228 wrote to memory of 2672	4228	chrome.exe	86
PID 4228 wrote to memory of 3432	4228	chrome.exe	88
PID 4228 wrote to memory of 3556	4228	chrome.exe	89
PID 4228 wrote to memory of 3432	4228	chrome.exe	88
PID 4228 wrote to memory of 3556	4228	chrome.exe	89
PID 4228 wrote to memory of 4524	4228	chrome.exe	90
PID 4228 wrote to memory of 4524	4228	chrome.exe	90
PID 4228 wrote to memory of 3436	4228	chrome.exe	91
PID 4228 wrote to memory of 2304	4228	chrome.exe	94
PID 4228 wrote to memory of 2304	4228	chrome.exe	94
PID 4228 wrote to memory of 1724	4228	chrome.exe	95
PID 4228 wrote to memory of 1724	4228	chrome.exe	95
PID 4228 wrote to memory of 4032	4228	chrome.exe	102
PID 4228 wrote to memory of 4032	4228	chrome.exe	102
PID 4228 wrote to memory of 4256	4228	chrome.exe	103
PID 4228 wrote to memory of 4256	4228	chrome.exe	103
PID 4228 wrote to memory of 420	4228	chrome.exe	104
PID 4228 wrote to memory of 420	4228	chrome.exe	104
PID 4228 wrote to memory of 2312	4228	chrome.exe	106
PID 4228 wrote to memory of 2312	4228	chrome.exe	106
PID 4228 wrote to memory of 3740	4228	chrome.exe	107
PID 4228 wrote to memory of 3140	4228	chrome.exe	109
PID 4228 wrote to memory of 2872	4228	chrome.exe	111
PID 4228 wrote to memory of 1020	4228	chrome.exe	112
PID 4228 wrote to memory of 2516	4228	chrome.exe	113
PID 4228 wrote to memory of 2564	4228	chrome.exe	114
PID 4228 wrote to memory of 2564	4228	chrome.exe	114
PID 4228 wrote to memory of 3908	4228	chrome.exe	116
PID 4228 wrote to memory of 3908	4228	chrome.exe	116
PID 4228 wrote to memory of 5312	4228	chrome.exe	118
PID 4228 wrote to memory of 5312	4228	chrome.exe	118
PID 4228 wrote to memory of 5344	4228	chrome.exe	119
PID 4228 wrote to memory of 5344	4228	chrome.exe	119
PID 4228 wrote to memory of 4292	4228	chrome.exe	131
PID 4228 wrote to memory of 4956	4228	chrome.exe	132
PID 4228 wrote to memory of 4956	4228	chrome.exe	132
PID 4228 wrote to memory of 3520	4228	chrome.exe	133
PID 4228 wrote to memory of 3520	4228	chrome.exe	133
PID 4228 wrote to memory of 5356	4228	chrome.exe	134
PID 5028 wrote to memory of 4948	5028	chrome.exe	137
PID 5028 wrote to memory of 6136	5028	chrome.exe	138
PID 5028 wrote to memory of 6136	5028	chrome.exe	138
PID 5028 wrote to memory of 5872	5028	chrome.exe	139
PID 5028 wrote to memory of 2400	5028	chrome.exe	140
PID 5028 wrote to memory of 2400	5028	chrome.exe	140
PID 5028 wrote to memory of 728	5028	chrome.exe	142
PID 5028 wrote to memory of 728	5028	chrome.exe	142
PID 5028 wrote to memory of 4756	5028	chrome.exe	143
PID 5028 wrote to memory of 4756	5028	chrome.exe	143
PID 5028 wrote to memory of 3380	5028	chrome.exe	144
PID 5028 wrote to memory of 3380	5028	chrome.exe	144
PID 5028 wrote to memory of 632	5028	chrome.exe	145
PID 5028 wrote to memory of 632	5028	chrome.exe	145
PID 5028 wrote to memory of 5684	5028	chrome.exe	146
PID 5028 wrote to memory of 3080	5028	chrome.exe	151
PID 5028 wrote to memory of 3080	5028	chrome.exe	151
PID 5028 wrote to memory of 6044	5028	chrome.exe	152
PID 5028 wrote to memory of 6044	5028	chrome.exe	152
PID 5028 wrote to memory of 644	5028	chrome.exe	153

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\5bea2678c7a188fe0ca82068395cf88c.gif
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff90f21c728,0x7ff90f21c734,0x7ff90f21c740
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,9662376621883149953,700413046918564177,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2100 /prefetch:3
  2⤵
  - System Time Discovery
  PID:740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,1164098017000410154,351354256249025164,262144 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:3256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2364,i,7716512753693163765,14151767709718696620,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2376 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3232,i,950944357167023570,12817461411667515818,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,17877377883536201892,4805953226120624250,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4444,i,14612737811061159114,8364572280702905337,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5340,i,151847863198095718,9278593612620234714,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5432,i,3017042802235476974,8620056493091384738,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5700,i,2859921392874368335,3496541243031362161,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3472,i,7926743920772106812,845045664612345532,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5828,i,2036868971186837507,14875341248336527654,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5612,i,15166743942239229889,5200139829427090268,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6624,i,94057302591572033,622564063411286180,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6636 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6932,i,5238961925260726564,13150265703778475873,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6936 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7000,i,5302247568304796793,917172342517101267,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7200 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7384,i,17854074663971395909,9399995780113471322,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7576 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7364,i,13797358475995027904,16487979771378754912,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7372 /prefetch:8
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=7000,i,8684449033251517412,17854941552048316821,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7260 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3304,i,14507092398101361016,12542288215266642451,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5828,i,17924294602122703380,14371399182084184929,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7556,i,16184228675022169335,2141925056045920483,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6868,i,10720703610831716610,13903706258791832746,2097152 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7680 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2096,i,15372236008766125216,11546189394985685968,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6968 /prefetch:8
  2⤵
  - Drops file in Program Files directory
  - Modifies registry class
  PID:4292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6276,i,7763537429366985913,15323144935152061419,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2132 /prefetch:8
  2⤵
  - Drops file in Program Files directory
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4032,i,14273630771339133393,8094938666772151608,262144 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:2
  2⤵
  - Drops file in Program Files directory
  PID:3520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2220,i,9694436092885275696,4275915584389873999,524288 --field-trial-handle=2056,i,18396633619596261492,16740326672566785679,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1576 /prefetch:3
  2⤵
  - Drops file in Program Files directory
  - System Time Discovery
  PID:5356

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4072

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:112

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3c4 0x3c0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3824

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3912

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /0
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4200

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:5028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff90ee7c728,0x7ff90ee7c734,0x7ff90ee7c740
  2⤵
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,16181456123294180278,13589701926883835174,262144 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1868 /prefetch:2
  2⤵
  PID:6136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,11724797066551466315,18306382022161060430,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,5451637868891788201,3567012524062560050,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2360 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,1166827886338710633,12532018649827360581,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,11243300516163019965,9669724965757800754,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4556,i,5941578607665499273,873941360812885942,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4544 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4756,i,10567690660756063314,14106690186404401836,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,10904805211612646918,15826821008893974504,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5772,i,17556533847344088237,3658243614975460460,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4688,i,18041978120904796793,1343882242876354540,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3108,i,17768332292332208593,11015562935461425893,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4728,i,12441175469835802652,15059922483442274915,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4560,i,17164306391568698869,18440145628331523190,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4588 /prefetch:8
  2⤵
  PID:384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5800,i,15997975258403732106,2716709127655890565,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3260,i,10695173783666978486,6849432213664050873,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  - Modifies registry class
  PID:960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5964,i,6586826269073384058,16359615553357828208,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4692,i,12975413815658294181,1073042930677968149,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5760,i,4741714127233937553,6834113422043979583,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5872,i,13610922239629706859,17362899491772670485,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4776,i,16936067199459299780,3850396526494111410,2097152 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5652,i,16732140011554354987,14508109020823044184,262144 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5320,i,4379918559827570937,18392305131904908768,524288 --field-trial-handle=1880,i,12808265364139956066,1120569249356526651,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1204 /prefetch:8
  2⤵
  PID:3136

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

debug.log

Path C:\Program Files\Google\Chrome\Application\debug.log
Size 314B
SHA256 eb879dbfdd08e37fd67d2faf0d75fb1fadfe3b8282f703328ae340c2a3878cd9
MD5 ba74724a8b955a486a47099d80e6522d
SHA1 ac1128d16ea7d560d93931286b4e333e3e146a02
SHA512 269ca27c72b31df36c1ae566119dc68be2535893c5bf156e24566b694fcf40a6033a729b791b83ac3a7df580a75d5c8043e75614b1405b067594ce8438c990aa
TLSH
T1A9E0865F5EC102ABD025D822390866B0C596384F202502A0766B91E6F8116BA3EF9D92
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 67ee11b51cd6f637795e31ab501f135ed595c8459bce885735f08b0418513a17
MD5 34c29bdb9e41b1f47f2d2786762c12ec
SHA1 4075131b18c3487e3e848361e112009c897629c7
SHA512 ca3a978798e77b2ced27b379f38e935ef18beaa7ea23e34270a9af20b37e1b1c5edf9478606311cf1acabd83992766cb3da8444de9394c674d5955bdbc53c0d0
SSDEEP 12:bHCskaXhVMMBKEKSCemJKlkQfIYVhYJ0X:bi0ROMMBS+MkEPYW
TLSH
T151259286B34455BBC54189B188AA17606274F9E89F82179A3B18E60F1E661DC0F51964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 f46e987b393cd6609db2cfb81579623e6c1ff06cd5d0bb36f4f71348130de12b
MD5 37aee978b623a4a7825596a618a1dfde
SHA1 d7fcbead61319a98385cd4a3418cdc496d781a38
SHA512 b612325b6d6695670405a660640e2eb9f75d9065559194886b0ca8b67700037a92093fff9fe8eae3977455db1ae834eaff016ea1090be69bb683328dd3352109
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e3ce1cfd9194a060cb64903341b5b5f5ccc26121713271d29a42c6a2f66182db
MD5 7cfa4c4048f84be08d41abb2ffd7f0f6
SHA1 7add94e9142db651e54653aba6652e032e31e0ac
SHA512 c63c0d915b15b2c00136844d4a58fa8c69a16bfebbeb4179f04f581010bf44530e2745eba1dec430137ccb17d42a104dee9eef12ecda3dc69a39632a9839b300
TLSH
T1DAE02B6AC821BC2708FD071860150686E751535B2F80551F3B3D520CCFB062642C6C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 82KB
SHA256 f2583aafb9fc2980cb1258e8c3793d0742d300a8e39fadcbfd3d8e08d8ac1d24
MD5 3652a76dc3fb1636f920df562f70c04e
SHA1 bb574e66f2e1a5cd1aeabdb9da78a02b921ef95c
SHA512 d14debad1f36bc997f6e2ecf02d0748a637242097a37b0e6a880fe2683d46415354f2c2eb977266c60351cc3dbf1cee01309b612c1b2f800f476d52cde191ac9
SSDEEP 1536:W248HsAatptwxKNCW/B7v4gvEwzs10ZfvTYASj4KlVk1NNZg/g:WzIzwtwxKzp7vywzTrYHj4KlVkHbkg
TLSH
T1348312F4F7D4E6D9DAC2776EE3C4C184B0F219327DDC1B6A4D3289A49546E203E14E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 514KB
SHA256 b2bad5f012c60990a89f45cd0be309f4a86da9ec760edfdd4d0601d2ea885502
MD5 65c32e3609b46a3d6ac14782d15b5810
SHA1 fa09f7ff78996a83a3d57ae0ec6f2aa2d3856868
SHA512 e01ba63301629ccb8f925c1e6a96ad1ab3151d5a26f2737eff75e1d439127c55bd819129c348db2bd81ea39b1a78fde8d3b8d20bf43940c6352423501dd89c44
SSDEEP 12288:srSKELiHCv8mHgDMyLy5FbNtVIHmhOxzQpuZh0dlwan9:sQL2Cv1zMmLxdlwa9
TLSH
T1C5B423EE424087EF4779D11DC4ABFB9AF5961448DEB53E1201BE041AAC9E1B10BE1D8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 f493cd384c32fdd6f32135cd75c1d30d2103487d1c8f44b857342ffabe8a8ed4
MD5 fb78f1258dd81ef5e28d2d319f4a072d
SHA1 872db1736a6b3303a5042f5b928543714b876f67
SHA512 155390171d28e3ee83eb84de5915661475d1ab32e672a41ee5c428a75af14ef7dd2e9ec82cfe5710ffaa84d8d49b867448b92f9e0cb04451fcf101aba5b1aae5
TLSH
T1F1211C85BE41A826CFF05EB28084590232943D3E81EB8E0E33A8E60F50A32B0D719F0D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 24a75171542de3dca47c2a955b9119e9639a574fc6e519ba0d90f0ee4c9e047f
MD5 3112ba95a4d7ac0fc4f9ffd3b654a623
SHA1 87d5ea8e5c7075ffbfc0d4cf321a5b302fd86412
SHA512 186e5c102e13a92d7d301dadaa456e63ae4c857d4597facceb7ee005f2676a44b36de605634c06c0b1ed025e05815d9449d6e72ee459aba0e373176a5fa89824
TLSH
T1C1C08C03A0880247DBA2617944A5BA88B314E43B12231B0B43D8A0B6CA26BE4A028E80
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 a70ee3b5d208563d69fcae055ef5ab22bf42cda4c04b0d6ea9e863fc87a3d42c
MD5 6ec736fb3412a7c403a051164db5d422
SHA1 5b19a7d5a9c97b42694d4c8d78dd74718f99172b
SHA512 50493060903e7fcc317150b1a9c1c4c9d5c53be4f02dcce1191b2cfc513bac05a001ef03c63fd3abe1325627db73eb481b34b3ee11da25d12d5c4ea0908b4973
SSDEEP 3:MsEllllkEthXllkl2zEWd:/M/xT02zPd
TLSH
T1644404077FC04D45CD0010354051D3513370D4704D11DFC335F114535CC75C00C01541
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 e845831400a84ba44a31e9c493c13e78eea1ccf8a59d0bb438ae562c3fcf3a6e
MD5 449b00c519b3845b60409816c6f2444f
SHA1 0905c3b699f75cdb56ebf5b428928030f4a14a67
SHA512 0182a466cf74cf90fd0fdeb18d239a2ccc26490e4034070dfb1613e73e24ed4674cfa45db7e4045ea92663aad49f1ca797034aec155dc5fdaadb43c2b5a3562a
SSDEEP 3:MsEllllkEthXllkl2zEiM:/M/xT02zg
TLSH
T137440415FFC05C05CD0410304411D3D53374D4300511DFC3357114175CD75C00C00440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
Size 80KB
SHA256 50d5a3f77597863f01485a4e2f7a7a5b58b501f8d934e6fc75e89569f189c83d
MD5 38bdb547f1d09fb760d717890186dc57
SHA1 282bc4fd201469ef4b8d60c182bb92b742786070
SHA512 4408c6e01a066680b69a13e1e00287694ecd6adc8fa62f43fd4dd6ba31cd4c2e0036a8dd3ceea0782f4f0d4f09079a8358031fbc6d741d69dd54bb62503b87cb
SSDEEP 384:TmYg8cwIrP4GJKFQKb8JeUav7Uu8KW1LvoeN:xVIL49nbtUU7JvALQe
TLSH
T1A7832AFBD34EAB7CF556D2B81D0369D9B68E4C29D4BC52C2EE4C896025B411228D1CEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000011

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000011
Size 10B
SHA256 65f3e6f2819e44fec302be2de4c71d8040db5e4947b36ea757df4faf907d4f0b
MD5 35c3304767a981f21370676a118529a6
SHA1 e0de81afc1a90f3d08564e304ade1db9c19fe9cc
SHA512 84b6c5c28848df6bee181b224e073f6ebc50d662cf94934e8f9b426083fc0fad4dd0d602cb49b72941af641b0645e5b58063a2e6fad7fa301d5b9cf06436ea0a
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 9b16d44e61484e20a36d490c00f8e0200eb0bf17bd97722b18144c4dd7a7fb4a
MD5 b1b0f1301cbc2cb3b8436020708a3a0f
SHA1 d28c22fe73cfd61c8f341e8f93a017ba974e5d6d
SHA512 08933ef9ad4075d6aaeb02e98bda9f4fea43fd7b1b1ed6bd611e658a2c1c185380994a38eb31206546bc53392618db614e2fc81786d682c3759cd65823a5cb1a
SSDEEP 3:MsEllllkEthXllkl2zEMJe:/M/xT02zW
TLSH
T1524404157FC04C07DD4010704011D3D43370D5100731DFC3357114175CC75C00C40441
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
Size 320KB
SHA256 058cb9e7b4ed379fc85c5b123e08f63abc823a2c99e151bd6cdf6c0e44612da9
MD5 97ccc0e165b5bc9f4c23d4414a3fcf0c
SHA1 6f05acf9bff94237bbdfa1aa522c3d9f2efbc0f5
SHA512 0e3a4e6484a37c6222ff4aa74989ae200734106f34ef0c1a10d02a5a5ae03d2119a8882960ded2903392394c569897a91c9b0a8e27bbb523420d0c3e494b4c20
SSDEEP 768:YOXcqwCpZ7264igkq9zXWdJAzhTBO0yy0amxLS:Yol2i8XWdaQbNnw
TLSH
T1DC644EFAD30FBA38F562D2B81D53699AB64E8819D4BC66C2FD1C8D6025B511218C1CFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History-journal
Size 24KB
SHA256 94c55538eae5aafe96d8c1cb54ee19e666574674bf327824268022f0056f939d
MD5 8e65852f445662a78d68a3be5afb38fc
SHA1 dc8000be8552c288ecc987f90fe97335944bb50a
SHA512 aabfb7859062a7b82917b1b501532c05e7b0dce297606bc54d4f2aaec3c8ecce35bd0bd27b92eccf716511afeb2b58ff19f832cf67182dcd75965a6f4e42436a
SSDEEP 192:V/n0r44o4lwE4Yfw0PN02po/Ybun0r44o9Dy0hLW0IZvcrv8qvbn6A:V/fYlwEZNbIYyfdDyOXIZvav8qvuA
TLSH
T1A8B20F143A37B66CE395E338A7A1ED4ED1E32657C75EFC82F00466B32332B654A049D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_tungtunghook.cc_0.indexeddb.leveldb\LOG
Size 349B
SHA256 5d3328a39353a2c718df36aacf71424464cb931de00bccaf3331d73e4877296d
MD5 9d7cd7bb9fa4a26e409b1effe4775238
SHA1 534cf76c829804d193d39abb18edb099ee9b82fd
SHA512 b6639087eff217ddbd60542d8ae8e18d838975f5e8909236f774dfcf3837e93b3acba826008f7052922fb9700b915a26376730249c0fb946c0f2ea89035758ef
TLSH
T195E0C00C60CEEA1F2060C17251317B0DC9E3540CE7C86A478F41D87431C50085AB8FF8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_tungtunghook.cc_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log
Size 899B
SHA256 21acb9de4a22c1390d8fcde3f365f80affe8b86463eb2ac04b1532af4c5dac52
MD5 a7d7f8c120f2373af56268f039ba4cca
SHA1 ff2d2dc5d954832557c634f832e0c07098503f0a
SHA512 bdabe2a1470590bce049b49877d0bf639ccad1c2df307427c51199d7ce30c4278956bea16f55cb8ccaf3ed8567c7d78189e156f8f7535fab877efe0db4ac43f6
TLSH
T175112EEB534F7A99A76E14B04173B7BCE3574058CCA1A28BFB40AC3059757A31A15CBC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG
Size 329B
SHA256 82feee4be74b7b0571e600a5bc3af513e302293846f51bf035e577c7569398ca
MD5 0013ec7c3ad4499c6ed64efa9e7a3971
SHA1 38a8257fe858d22ca8793cedbe7dd37679c82aca
SHA512 f87ddbc75c1baeec602fd79d12f1ebc52e58ee7dca716c03e9d89528ebcc507a11c97f0623fd540c5c24d20ed360044abcbaccbafb2836c8bfe367588303799a
TLSH
T188E0DF94A4DDE5AE12A4821B8338B30CDBA03608EACD6E022B41A4A4A1C8448B3E13C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Size 48KB
SHA256 5d4751ea170ebfb18672380c622765e7b0927af2096daf467257343fc63a039c
MD5 2ce050fd8c2e04c864e2bbc16b3a6494
SHA1 8c20b95b1752ffece91f1a211b5e68dd165d8733
SHA512 147754339f55cd059775fb695951122d2bd6a10b4bd7c486ac31c2c90dc543eacb901d392268dce8efabe111f186eb0b2dd4683a989893e0291c0dbcec2c2922
SSDEEP 768:bKfKjYR3EbEH3+0MiM/ydUgq+H8nhLjNI54:bKqb0MWRZH+K4
TLSH
T115236C7F244730D9D3DF31BE49B1422162E6041BA64EF9C675E2E6F00A65EE3F10593A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cookies-journal

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies-journal
Size 32KB
SHA256 883046058fa25c0ba16ddfa6ad1f167cb2632cbf4b1aaedfbc35f3a3aae339a2
MD5 0343c870d14b554b10108b0d9e86632b
SHA1 4806d0ed09dd3999d08ad4c3f2ae79d192375829
SHA512 2ed418df09eea7db67394b19ef05cf79e8751a8db75d03f566aaaeb931d1d3ca97014ee52085d9c9c620fd7edf1bcd09d1cd93d526b287b68c47b157a068c092
SSDEEP 768:DbfJjYR3EbEH3+0Mif/ydUcq+H80hLj+I5X:DbVb0M3NZHsKX
TLSH
T181E25C6F200730D9D3DF31BE59B1821162E50457A64EF9CA76E3E6F00AA5EE3F10593A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 eb577cf76b60903bbe1934542ee07c7adcab7b495884df9320c429c52f6d8825
MD5 beba77d7ff4de3e2c69840c5fe8b501f
SHA1 41fbaf50db1fdf7d5e377153d2f98184176e0763
SHA512 2ce8937b0e9afc1e5715b7891a3cb7a49e69482af3515e4622eac9f4c09d93961c0df0490c8050b39c0f673566aee9de00c979fc291ee0b7f49e8357ef061e7d
SSDEEP 384:Dk0uajltRx19qdkwMQNaV/EGJJ5JElSEaa5iw8oX54XN02/fh4NPiDZFuF7onCgW:/DEIJYW0y72J
TLSH
T17FB2BDF783E4C67E992056F0AB153E1FCF590A28831C7D968AD0BE6B57E2472D21074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 befaf5f5b4f9151806349bcd75da7437556c533d27bdb21695e0843ce9b59a7b
MD5 c6de23b51539b0f45c4e559401368d2d
SHA1 600f7f41baf37a6cd7341d772b97e84d5a29cda1
SHA512 a29f0d12ed72312873d3e53ffe16355b12705ceaf864b1346b6e540e450dc6173e1523d3b4cf4d8df95c15e9fb8ab059ac6d7a275158d47eebfd97b87025f29e
SSDEEP 384:Dk0uajltRx19qdkwMQNaV/EGJJ5J7Fqaa5iw8oX54XN02/fh4NPiDZFuF7onCga1:/DAIJYW0y72Z
TLSH
T17CB2CEF383E4C67E992156F0AB153E1FCF590A28831C7D968AD0BE6B57E2472D21074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 bd4f76f57a0b1f9f4cc6cbd37e04e01afecd8bce1492b2297b1ffbd497b173e7
MD5 d2ac8ee7b0318623a490f635cbf5d95b
SHA1 4e55b9ab3039678ac4fe954854b37924f43758b0
SHA512 bac9c8e148a829fcb5bba018243dcb94dd8884ef8705e7d8bb78e83d252fba97c1726d669ef92181cdf3157608932b6f95ed2382a4f7d7e0856903315555d6de
SSDEEP 384:DgD0/P242b7nJWKCCQg9taa57w8oX54Xj02/fh4NPiD1FuF7oCCyVCsDYuqwjXFa:Pqr
TLSH
T1E1A2ECF387E4867E982156F1AA153E1FCF590A18831C3E968AD1FE6B57E2472D20074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 26KB
SHA256 b1aa8fd4d4e65ee6f6e96a134586b10c2a16eac61ef167bc766ed2b51f4cbdf5
MD5 dd929962da938273889b5872f32a7162
SHA1 8df6bff43c33d3391a9636a99fbf78c9cd07dcb7
SHA512 6729764471cfcde76cc04e84d97f10bf3c0ee426e89dcdb0b01e50e841d24abac3fa358b1ea672f3920119236d28a5cb27665fcce326fb0cea0e9043114041a2
SSDEEP 384:D1QbsuzrLw02UL4EoQdgVj4cfJFRaa57w8oX54Xj02/fh4NPiD1FuF7oCCyVCsDF:tPQtAYW7TNEz5
TLSH
T117C2DBF383E4C66E982156F1AF153E1FCF590A18832C3D968AD4EE6B57E2472D21074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 a62be7f61d9d07ca17aab143cef5d122be068ca9314f1b2f073c8e7793897656
MD5 8a32bab4e9d44b6d6518612facc87e0f
SHA1 780ccee41c01027dcc6ff126f9980a287a67e7a8
SHA512 13c46222a652559acf159348486c8b0341b4670f01c3542907d5187e00b04b343aab6874cf34f6804feb26a6a69e382da4bbdb029c1e5644aa65160cd55e0128
SSDEEP 384:Dk0uajltRx19qdkwMQdgVj4cfJFJfaa5iw8oX54XN02/fh4NPiDZFuF7onCgaCsN:hPPIhYW0TNEzK
TLSH
T101C2CDF383E4C66E992156F0AF153E1FCF590A28831C7D968AD0BE6B57E2472D21074E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 879f6f0626fff668e1408ba61d0ec28ed076969c51bedd3c68c62944410b88b5
MD5 4dde903a858a77915d2f559a31b4c0c9
SHA1 34c1c03a1f52d3645f860d6733be18f69eff69d4
SHA512 c4b77845463c957b1e55190a5b557a583ff19f5b1a85f1ec1f79a13adbe810ce6d772e5ed386102dd630d37d061c63f7b8f9ac72690cde851aa66a97756f502d
TLSH
T1100199BBD67F742300B998BF5E0578052DB6B83402516AF9CF97967CA0954F31F02843
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 d771bdf9aa8f859c580e1bedbf6e04030f886ff146b9d3594d530043e8c7a99d
MD5 69705ea4fd0da86e60c01db5ba8c9956
SHA1 6d2178179bb8a3a8edf939d223d6c30098f91512
SHA512 2a57e51bc480f00b7738a9e5ba91d2f72a22cb014a5c7c4ab5d98365d119ca83dd3a32febaecd375ae88480b247c21c53af235ad9f4aaaef11e96f9ccc1ab882
SSDEEP 192:iRucBz31CY/EKB3Sbl+8nPATX+YaUJ1CD3v7BMSPRpY2m9II99wHsb+WNnodKmd+:iRumz3spftXXFQKwEJQk2zsa52E
TLSH
T12C72A42BA429397B6DC6A265B512BB87C3B6102196C01E94F7E8CF1C04F75CD3317C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1883f5a2f27e174ab2549d7d80344485f06f24bc8258ba9abb565e218394b57b
MD5 d9210c9435ba75045f4ff2f122064e55
SHA1 e297ac0eb77c602fdb62e697dfde02471c552483
SHA512 6e8dda512d00f48704d7e03b2d25e641fb4177ac24988072eac91bd0cd74da9e3800cf7d9b22501ebe29d4ecb9f783bbd861b97527341a823cb096077ec6c34d
SSDEEP 192:iR9DcBztUJ1CD3v7BMAPRp22m9IItF9wHsb+WN9qS5rlSQbb2PaKAwkwMab+VyI4:iR9DmztpfttX/4FKwfAQf2zsab2E
TLSH
T1AC52C52EB924293B6CCAC21AF912BB57D7F5112126841E94F6FCCE2C15E79CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 a3a997c999a8b7ecef35174effbe4403d5cbf1b03c3e9d971ad842b294a4d759
MD5 84059f476f1f7ca0e2eeda66dad0aa84
SHA1 ef059cf2818af3a69929b3d69b2b42087a327412
SHA512 fb8977ebf0b435361f8a1c51ed936d79e7ad2b01f24052848d1c0f96f1c7f8253a7b1d282cbc504b2d3b81dee05610b0558e3ed42a226c0c62d44f411997741e
SSDEEP 192:2RucBz31CY/EKB3Sbl+8nPATX+YaUJ1Ci/v7BVSPRpY2mrIW99wHsb+WNnodKwXu:2Rumz3sIXtuXFcKw4G/2/2zsa5Ue
TLSH
T10A82A52BA429397B6ED69265B512BB87C3B6102196C01E90FBE8CF1C04F75CD3317C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 db951e7113f45c7bea9b5b8b336f2deb0ebe333706451c80bd5fa9a7bd578ed3
MD5 8898bf47e22c8f45e41e3a84c852adb7
SHA1 08752ad8e1341cd7f6cb89bad368481c3d8c3f04
SHA512 a011e4ec04b4e7c672ac7bc8407ce474dca0bc7756cc9d56e5466933429138090cb32ccbafe5fea441262f72682201284609088fe9aae544f18808ac5135fc9e
SSDEEP 192:gRKhUJ1Cnvv7spAPRp22BK9wHsb+WNnih0lb2PaKAwkwMaO+VyIsnAUge:gRKhRnYUX/gKw4052zsaO2e
TLSH
T13242C72EBD14693B6CCBD21AF9227753D7F9112122842E54EAFCCE2C55E79CC222741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 16KB
SHA256 2c36fdfed660fdd34f1801ad4932c646cc1ed6486ec9883a160ca4f4e37621d0
MD5 66f2fa2cf87e7fcba458bd6ab321e284
SHA1 5742d6da547e61461739a55cd391260be5dd0235
SHA512 6838866b85528daf977a45677a436e18325a699860843683e32c9fcb440785aed88abd269bb93c9f4085f5d61b36a2cfcbc962da1ad8c5abb3c0e77a4ecec129
SSDEEP 192:iRucBz31CY/EKB3Sbl+8nPATX+YaUJ1CD3v7BMSPRpY2m9II99wHsb+WNnodKS5K:iRumz3spftXXFQKwoAQl2zsa52E
TLSH
T11072A42BA469397B6DC6A265B512BB87C3BA102196C01E94F7E8CF1C04F75CD3317C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 0eeda03cacb27407063f4abd8c1f7321d6fa847011afe73e77ab3af8ef2f1260
MD5 f3dcc9c94c9e5a63e083d6f6c5c8abd1
SHA1 49b1a12f1c5a85112bfada219707b0e4d119b77a
SHA512 7d4b5d68d5790be74c935dbf3835d575f053d26ec35f102c44e779bcca6fa0418c0c87c1a55cac62a7fa9b3ab94feeab684b329a6db656c992133066ddb3d165
SSDEEP 192:gRKcBzhUJ1Cx3v7BhAPRp22m0IHtF9wHsb+WNnihotJhq2fSb2PaKAwkwMaO+Vyz:gRKmzhzft8X/8FKw4Ufq2f42zsaO2e
TLSH
T18052C52EB924693B6CCAC219F912BB57D7F5112126841E94EAFCCF2C54E79CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cdec98ffd83cd4f226eb00acb7b12b861b6be0e2a0ecf61282856d964ef8b1ef
MD5 03c7bb33b04433d9714459e64f4faadc
SHA1 48beca95c5f73882c5d8aa17e8beedac911cb48e
SHA512 4fda1f021beea80a65d00d84301e0ff45c6f63cb65e737c51d0b4d33dd6564f024c9d74b6298fa4d398211c74289063b22e45da691a22c95a502ce9aee82ce9a
SSDEEP 192:gRHcBztUJ1Cx3v7BhAPRp22m0IHtF9wHsb+WN0MihoaBM0b2PaKAwkwMab+VyIsv:gRHmztzft8X/8FKwK3Mq2zsab2E
TLSH
T15F52B52EB924693B6CCAD21AF912BB57D7F5112126801E54FAFCCF2C15E79CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 729c5633bf4ff689a2cd70d80aeefe92829055ff8b4ebc5cf9591326f3056280
MD5 ee2de29effd6a23f15ba56a8962df597
SHA1 a26e557a794f76ad617ba7113c5bb4daaeea6c07
SHA512 d909cb57a233bb66e4f9f963c8b112cc01d7b57e9d293446fe3466f389aec978bfa5ec1d20cb88e9775aa0c7bca3b8c01d4746704653dfb6d32b1ca5fd8c153b
SSDEEP 192:LRVcBz31CY/EKB3Sbl+8nPATX+Ya8J1C1sv7BVSPRpY2m8IO99wHsb+WNnoLKxGx:LRVmz3s/4tuXFrKwWZfWx2zsa5Ue
TLSH
T16882C52BA429397B6DD6A265B512BB87C3B6102196C01E90FBE8CF1C04F75CD3317C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 1d4e2d4f9b700f88e5615caf3cb163ddd61674200179926e76a50542e422ca8d
MD5 758fdfa6e9acc895d2e793639e46de0d
SHA1 c7a220384d9d44221917840e738ac6a0a9baf878
SHA512 9178ac2abf8a65600b1b934ab4357f4acaeed6e3ff81c370011bbfa61868b8c010dc21b45769207611900fb50fb23d79ecabe14fac0f944f2699798e0fc837c7
SSDEEP 192:NRucBz31CY/EKB3Sbl+8nPATX+YaUJ1C1Iv7BVSPRpY2m8IO99wHsb+WNnLXKtK8:NRumz3snUtuXFrKwRsfWn2zsa5Ue
TLSH
T1BA82A52BA429397B6ED6A265B512BB87C3B6102195C01E94FBE8CF1C04F75CD3317C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 17KB
SHA256 f3136fdad4fc2cb0e297015bdaf167e2bfd5fb827badffa55b2463c0f81f9522
MD5 a76285e3e71ea972fa6c25bd6b6c4d61
SHA1 2cdf20f005c31597adaa81401160b9eb98cdf177
SHA512 9789709579ecc3618cae045c115f24e6356d7586cb602a9060bea40281fdd76efca9ce7718bf0b1cd1de2ffaecdf4c58a2b224e7c69bdc91aeb462ea7799d2e4
SSDEEP 192:LRVcBz31CY/EKB3Sbl+8nPATX+YaUJ1C1sv7BVSPRpY2m8IO99wHsb+WNnoLKxGx:LRVmz3sn4tuXFrKwWZfWx2zsa5Ue
TLSH
T1D382B62BA429397B6DC6A265B512BB87C3B6102196C01E94FBE8CF1C04F75CD3317C6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b7dd709f362a7a2c77f4ec46f477e0ed8a1ba9c0b02fdfd41f765472427aa9b0
MD5 f10fd70f8daa55cea7228972e7c0e739
SHA1 618a2ef40c609d4a6fd6da25ec2bb66836c50ad9
SHA512 36bba95691ffe5be99c6d4bfcdd8275cbf69d4b7157f84107a14f7114a25eb125bb2f4c4b198a7a2ac7e3efefef2f79c617926abac8dfec0a15214224af54c83
SSDEEP 192:gRpcBztUJ1Cx3v7BhAPRp22maI+tF9wHsb+WN9qihoMbVaSb2PaKAwkwMab+VyI4:gRpmztzft8X/BFKwXbVa42zsab2E
TLSH
T18B52C52EB924693B6CCAD219F912BB57D7F5112126801E54FAFCCE2C15E79CC322741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
MD5 d066f854d368cbebca026e5da297c2c3
SHA1 4f2f84d54b0a8dfd273bbdb70bcde51ad5e2f12f
SHA512 613285c6b38983d33fb336394c5eff7edb692f60dfa433defdbf45524dd1c84cadfc8cba744a39b1c75482b318f7db6eaaae9842cfa8649a9ad00cece8442e41
SSDEEP 384:gCjUH7KxkXqKf/pUZNCgVLH2HfgslsZ7pLuLcSjCDXODUr+ErU3/NHGcmyqOqjmo:gCUH7KxkXqKf/pUZNCgVLH2Hfgs+Z7pF
TLSH
T15A7209676C4C9E370F94C6CCD8267F4F9DB5024B65E9886483FA9C2903D5ACB114A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\5658237d-ba2f-494a-8a4a-154c861f547c\index-dir\the-real-index
Size 168B
SHA256 eddcef778c621a1c21947c426baffadc602271402e8d433bcc0688640c3407f1
MD5 634a8f13a0b37af527ff0d86533ceb02
SHA1 5c7ea642efd51ecd058dc46d3b94c3991f369e3d
SHA512 137205659706153617097aa3be8738092b37da9991709ef069bea54efccf1faffdfcb4f01e6c527853d131c0f8854c8be17472587edd22a8ee68f9c824847317
TLSH
T12EC012B0B9230017F02027F08CE3260571311821076FF31D1CFC517BD4A2B884B19151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59136f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\5658237d-ba2f-494a-8a4a-154c861f547c\index-dir\the-real-index~RFe59136f.TMP
Size 48B
SHA256 281e9dbb9c424722bfab5f445974f03c2f806786a2d62eae353a656885a00cdb
MD5 1b6f9f5b3f4ec793bd1eb0a1c999a368
SHA1 6b90a2bbd9ff492f48acd9dfbe263789e89954eb
SHA512 877f16ad92136655baed0de69b057d081b4b5480122f332962dcb34c6acbf27050f26c9857327638a10b8f58cb7c9553adcd7b37c313b32be88d61ea0dafdfef
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\8970c017-fbb6-4bc0-8b84-17ca9f914a29\index-dir\the-real-index
Size 72B
SHA256 a5a4f07064c274c66bc5ef6f081f184c9d3a4afd84f35756469f7f6ea90eb02a
MD5 ab83bab7e40e42901f2224e4fb5e3f5d
SHA1 de092444c90dc2e8b20d592b866200c9b1e02fdd
SHA512 55b80d19df46bc1c16725329735e77a27e5958124719c3df89364b9135950c26e6be464ce58669f32c11f0a9989b117282e08f18017f09ef0c466cc8f3495855
TLSH
T18FA0026015C01002C095477021D505C43328DA1143265381E0E510F59C52345AA41B41
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59308c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\8970c017-fbb6-4bc0-8b84-17ca9f914a29\index-dir\the-real-index~RFe59308c.TMP
Size 48B
SHA256 3d84cdbcc84e70dac01566bbf4c5454cb50c9dbb72568c369f7c125e8c0fefa1
MD5 5cfc6263fa1da9900504c19cb3b7dd5f
SHA1 0044c11460d8a2d25ebca699f19e4939e9d88922
SHA512 b9a60f76ee4ad60d30c23f67d8e67e0f36d9d657a0de31cf03f440d5bc3fe093ed15de8ab0763ab77937ee926c443ca359c6466e39070dff145191e2428a6bde
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\index.txt
Size 208B
SHA256 aae781a006869805c256a296a1a1a3dea18f082a5163abb09f13cd9b031cb9e6
MD5 dd282db125a3f1d762b1017267754379
SHA1 b3752649c5e469bacc00686e5facc5e1b0cc30a0
SHA512 8ebfa6fad52d3bacde7f5992473a83656498cdd05b025d5c61798e2b5213fa60383c0b5d7fbd06bd799a5ce1d3d6a978720e32defc48ebc16e4877ba391fff3e
TLSH
T159D022AE90077A6D3821860C0833B228D3238E03CAA1E042E840B93C1C7C422DD00DBC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\index.txt
Size 203B
SHA256 0da6ceff5c5af2f5b89c242f23d412f8a2cc85f87f8155faa34e9d86d423b278
MD5 1240c445b4fc50e01c3854297bf09e28
SHA1 a3859736d840560be310eafe8c205c6fb3cfc798
SHA512 a5b3b0762d17975726553d13bbb8db85cfd53659d89cdb9521358238332ad8ad161fcb7bb6b8df8fbf8406bf4128889b0e0497d69e0509f828177a6278947962
TLSH
T1E9D022AEA003BE5D3D21831C0833B23CE2138A07C2B1E042E84048390C7C421AC10DBC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58a592.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\e2f55c940b745a6f4d83fbd753235053ce2a1a9e\index.txt~RFe58a592.TMP
Size 140B
SHA256 9d94c76f96c3488c5ae72648f002ad56b1635dd5bab729a075a75506bc906567
MD5 ab1d36f0f8f00e352b2122f2c688f0e6
SHA1 4cf9e45f8481ba9a8efe2890e4afc5a33c11048e
SHA512 c25c3d748ac216c1cee9e0b107d43a01c3c954048857b7e5f8aa4b3975ad55c25844c7a3e92de4f8ef9496a13e52f080906b82dc6cc945047ef8e48bb4d07d3c
TLSH
T128C02BDF8003345C3D3105080433B70CDA338C078770D143C400303114300129D40DFC
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
Size 4KB
SHA256 7a2e8c68155059dd196a704242347b73e2811a2aa159e0e3f362088d43f989e8
MD5 fc0ca6488aaa017a791e916d7ca0b65b
SHA1 240444b93ed22041db453e646b2cd71f7ce276fd
SHA512 12d0e0cdda7de3f46bb906d02e81e5be2a04c9868621b2ab295ee61e96c9cd2a4dc84f5618ffca4e1b1c8af6c4f7845032e991ccacf80a01e0d885c2d40b3f01
SSDEEP 96:F1mKAMiRwcnDh1Jk7ZQLXbXFXKXTrFXSXTnYXFXKXTCxhXsXp0XbXNXKXTVuZXIU:F139dmDhc76L1ajZCjY1ajE8yL9aju4U
TLSH
T17FA18D6EB50A184EE46D4936CD78571B5FA9CF0C27FE3367A9DF8A0405B0A5701086F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
Size 336B
SHA256 9019d94e789eff394fbe8df974950180df480b06810dea20c46c471156510ca9
MD5 e6e5f8d64e95cdb0908e1ba53b3bc69c
SHA1 3d0c118bc12626279db98bbd5900abc5761eaf1c
SHA512 dda44b749816e1f1ebd2a4b6b7a5ae145f021551def507bb5f17fe6e8208eba4165aed7204641f553d5a563b92fd05fac7754717c2fc8ccb0ada81e0b7691b11
TLSH
T118E086987ADDE5FD21A582130B70A30CC7E47409DBCDB9026F95D5F411CA90873E2390
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1b8351b401dbd75f1a2c81f995b46f09b5dde7378b31b72ba1951ac508189dcf
MD5 a031ce76575699898d3527ac277a167c
SHA1 5bd8a310946f1a9af2036fe00aa4d4342d3aa2da
SHA512 e7d3f6b499c4f7cdda0712ca74da5ebb9b8e681abcaa99c4797b8aace572496add35c092e4bed80a348dd4bf722d9d9dc397ef2fdc90f04ac934ec60b56bec04
TLSH
T1ABB0121184115111C4C303B03546248871149F14EE0A170143E0AA22C8261618024150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58991e.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58991e.TMP
Size 96B
SHA256 0c7bd165e2f67bd08afb540cf9a98a27b579300c7948cd1102143ab8132347e5
MD5 bb110e0a2132d75c6891f4de5ad0a4f7
SHA1 62cbe666a61c65cb966df949268061ec9c70af58
SHA512 b65832f3332a075b57f9625920eb49a5a53433acfd4e83894d6d0e66f9b738fbba47cc5c674138f274f2ac1bb6e1ae1403d6a8f68a83077a08dba20ee4c7b27a
TLSH
T11BB00266D1126212C08203B029D595D971A0DF75CA035236A7E06A66DC2677267361B1
MD5 SHA1 SHA512 TLSH

Submit Download

Session_13428441316432752

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13428441316432752
Size 36KB
SHA256 6861e12f96d3d811903603ddeb11d37a9556e880c508f4c1a74384635df25f74
MD5 22507dab13433b16ba525a1b649a1dd3
SHA1 fd2c67d55f8314978b5f1ec62f792a4fabece97b
SHA512 ca9a3c6ad47b92971bfb50c7344fcf8741df47824bf854efa5ffddeaceaae9fe661198d99407e5eb6126366034ebd9831fd8a9026d485c5baa75f8367df0d9e9
SSDEEP 384:pLkNEPEc1rxUY2nytFQvLjdTWfsZotos6C:eNeEa6nLA7WbC
TLSH
T1A9F2DCAE9B343539F13DC078CE4751A1BE75D902F1A4AF4689A5C0993813A03BED1DBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Session_13428441324330752

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13428441324330752
Size 24KB
SHA256 8c26cc9099c531f50568248c23fcef5930a25d170207e9679f5447624febd526
MD5 ed46625275ee340104b9497013d6ea68
SHA1 745fc6417d8e262a821c932cf8cc0b823050d84f
SHA512 01bd285ac920c20c11a7e1430bcd814543ec737d44fc195e555f2f9d77bbf0d811c71c513d1f75bb9f892127f5e46576a489e5b867ca13786fe0674977a2d4cf
SSDEEP 192:3qWL97lEIYgFtko7Fv+NAxlixYzG/XgcN0pIi78+l66i/Nv:pVlEI1HkowexUYq/XZN0pP7836mNv
TLSH
T106B2CCEEEB24253DF23DC178CD4751A1BA79D902F0A49F4789B5D1582822A037ED0DBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Tabs_13428441276887752

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13428441276887752
Size 14KB
SHA256 dbdd5c5a04c16c64a05e2baaddd5f59e941cbe1af73ef20c75ab4b76a7628ee5
MD5 acd23a89cb7de8fd858e11cd8cd1d10a
SHA1 816bd0f5290109e6862eb5e081cd039a232920bd
SHA512 890d9949b39ad5f1a25835c207d62b5d44cddf48adc3be236db89e35079cbedf3d8a5db977e27bf4900f0f25fe5b3ab3805cb8eb0ef75d45602e1469ddd33d4c
SSDEEP 96:3NWOOEkcqF9bfA6qpEUqtbgOqApbMdqvIeKqlhsqDT:3NWOOEkt970EuYgK3T
TLSH
T11462ADBE9B242139F23DC1788D8751A1BE69D502F1F45F8789A9C1583D12A03BED0DBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 fe51b4e7f4ac7d8d53744f8d7661052e2a83b3515fa4949d59bb97c6b519be9a
MD5 c06b88440c4c441c2d858752294f402a
SHA1 a6be9398eacb7ba109427f0bd62f9592edb7a6a5
SHA512 bbaf0ea744f87ca4b9507c93c1cb36c482a7a1166156cc54199d56d2f39ed5be0c1a990b4f3854fc840005cdcbaaef2d1eeda2dd1577052bbd1e4a3898f97ed4
TLSH
T19AA0021005C62841DE21027527CA01D0339458505315C653C1AA0584DEA22538133A11
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\db
Size 44KB
SHA256 d88759b314dc22bc7d7edb598af86b93aaa441ce67bcab8aeff20c82f31775ca
MD5 57c8769fce8242298ef65cc55646b991
SHA1 7796a3428e3282c08a2c9102fcc91c06e4b90b89
SHA512 9784f26d362f4f84894aa7bc827b381d27830f66d8ba187ee4995ff378626e6c0f32b46263855ea99626cd6be8b5a8b1de1b2bba0dbf6bfbf16644a7ef145ab6
SSDEEP 24:TLY/gJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwnq8rbPq8cfBOt58OIdac:TVOIy4m1b3fbU1urqdBOQOIcn+ECUC5t
TLSH
T11E13CB9F2E14B541D2B98139E4AA9F6F5D3F201C8F876CD169E016B34C9282C492F17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
Size 256B
SHA256 35fddfb2e8311d1f84f727ee5f44b5ba12b5e409ad88ec5994f35f3903e6dd88
MD5 8ee1174a2f05cca42b7f4825158e8335
SHA1 c121ff88cac4758d33c46add01956ab81ae96ab0
SHA512 ee71d2d67a00d910de9389610fa47ad8736ec60c20dc02cfc26cab9f976f1dd2ee081b555f4a708707c02a689daeaef0cdcb3e726deda00f005523deb0b9bb61
TLSH
T12DD0A784BB354804F8C9E3B1055597485F00F41774E2C0B3E54C1F044C07A2AAEF5DD1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
Size 348B
SHA256 bb80dac8a8e622762e1ebc0951103ed5af287c1b20a842a60f2c09e54b2601c3
MD5 f3435137928aac030d2a6e5a2ce6b33b
SHA1 c58ea74f3207c8e01b2140995a1ad670c701b983
SHA512 aa542d130079b01185c80ebc76cbbe7b7cb939c82223761cdaeee75a2fa8b26f81cfa8b7ceff6efff1b3fc9892862ac35e80d2b9ce777475ac0050c76d64c34f
TLSH
T1B7E0DFA92ECDEA6E1195811B5320F30CC7E1740CEBDE95122F04E0E8638B40873E2380
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
Size 321B
SHA256 40ccd73bf01bfaf1e2e5a3a463c10c78a021df5d8ccf94a02c482b530e946c79
MD5 825d55d6476ee7d7501e81f164f47aad
SHA1 465b15be576f351df097ec003f0376361a8620e0
SHA512 7310026ee3814171e32c8a9b003c5dcbc3ce6e3ab94496cfd2395bd9974c704af3b40d4d0e7a5130440ea6f83aa8587f59ba6718e1f39cf43fa49b81c0aa63a5
TLSH
T1F9E086BCA5DDEA7D1195C19743B5B70D86F0780897CAFA466B0454D06682504B3F17D0
MD5 SHA1 SHA512 TLSH

Submit Download

Top Sites

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Top Sites
Size 20KB
SHA256 20aa4d7af064e65d2a183208811111f54d641f07272e69be7e07944297de1e65
MD5 7ffe0f00f7f5c3a0263a321058451cb6
SHA1 799e34e200b49386c671caf24fbea74c3fd11560
SHA512 95564829e0c8c6ae90722bee396b268229dcf9e8146de109fb165628e08d6576809489e9f49f0c6c4acd5bab18804b9a3166d2fdf25243bf17f529b1ca97053a
SSDEEP 12:TL17CZhDu6MvDOF5yEHFxOUwa5qguYZ75fOS1OwOvjccogedOvzccogL:TLVCZwE8I6Uwcco5fBw9vld9L
TLSH
T11D92B8CF2F253823E8B08B39A2C780D89E7BD11DC791EF91D4945C316EE0840114A8BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaManager

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager
Size 40KB
SHA256 a9bbba3539cc5575601da5cd15a68885446328f8467b00e17cfdac18f71c93c0
MD5 d4a5026d08fe709d1af2422f3c043c83
SHA1 d71fdb63b09fc8b63fd18ba4be5e4155d416fc88
SHA512 a8679e553f984c7716d95f5181c43bd0d8870316a36f1d8a84726f888923c54216a9b9b43d046dd4d273a6a88b1c688f339a30389b119f1b5ec469330a036528
SSDEEP 96:f7doKsKuKZKlZNmu46yjUMrXwX40+XkXBaw:7ZT0nzXMrg0UH
TLSH
T10503508FA62890B3D0B2C13EDD8345E2FC3D550C972779D125E90B315DAC0736044AAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
Size 13B
SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
MD5 43ef949d3c6e9956545979ace65d0085
SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c0d8501bb8425f0405cc3491dd8393885870067e65150ad62e8c9fa3af66410a
MD5 3668fb9a1dad413f34c6e7b60a29a704
SHA1 7daf1dcfd1d488b62e5b36764a689056b5a5aeaa
SHA512 169e42f03384297393d3e565958dc49e6b0bd05070b6bf51cd469b653eb8a77466123916ecbfe9127d999755dbb1d30a3dc324937f7a6f773d0fd62f81c2deab
SSDEEP 3072:HGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:mm7Rkm1tYpBeh2BAoK
TLSH
T141C3123B5D65E87759B5BB5EB08E0A1F1EF249A6C920DE52C8D85F0423E9BCC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 c8a1bb4056adf320f90a216048ba1e9482f149b6d373f850818a459ab50d88d0
MD5 60b0d2673c76384c670932a6fb716f41
SHA1 a534b94af7c52106c34701ba6eb17cf16c4ba9cc
SHA512 41f056f190fcd9a2daa76d7522cebdc9f79681440fb615fcfe55aefdde9e43a3a8aa76125772e06c1e6cd877eaa63fa5048e0b1c213750d4ee084c2d5b720755
SSDEEP 3072:vGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:+m7Rkm1tYpBeh2BAoK
TLSH
T1C8C3023B5D75A93759BABB0EB08E0A1F1EF249A2C920DE52C8D85F0437F96CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 85f514a75168008f859dab22e93673679ef66183e8763ac08935d7efaf6095fc
MD5 88b9f0f14dfd94dc43e322a9900afa06
SHA1 377dce1bf7b4242c8ed235c4389a116347a6ce6a
SHA512 710f4bf5bcb98a10d2fafaa9963b6690ecc0f9db88d0090ecfdfb73a5846090e26f454c284cd86ef71a1f7ec86361c1a3377f2c433ada83d8d78671669eb22af
SSDEEP 3072:p5rQcaGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:p5rQc9m7Rkm1tYpBeh2BAoK
TLSH
T16CD312336D75B9765C69BB8EF08E1B1F1EF149B2C830DD52C8D89F0422F9AC90A44A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 254KB
SHA256 bc0bd522bc52ff61a46622acf0fdec428f786f5fc584e055db32a4a83b980755
MD5 16c90c7d719eacd5881b5eeabd268d0c
SHA1 458c488ed40a1ce5a5b7745bc08df5684a4a98ae
SHA512 b8163266c5cf11b1e7342179d65b6769c846f4a0fa813df5e664bb5590a3d8c2256a54f6883c07ea9d94079044c1cd34679e49550892532971a86115d09ad590
SSDEEP 6144:U5rQcjMLBMkBCgszxMoEIwOgEyhm7Rkm1tYpBeh2BAog:ZQMCPwFEyo9oBGcAog
TLSH
T1D54412366D2299F628B8535DF0CE1B0F6AF04D65C824D861C4C73F48A7F6BDD0A94A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 138KB
SHA256 5c74c5df6642c3ffa1140597db0ab5577cc6d70c735b40b8a04ebe82ba6cd270
MD5 16763907585c056cf7670ce5b0b59447
SHA1 c7b116dab51a1157febea9e6372b2177e5d83ea5
SHA512 09454fe05c2a76eb43b5bacfac80f3a1bfcb52406431866eb7f12021addf44efc8eb65fa639dfcf6a47e56fbcc8c657045daff0beebb41cbfa80d74500469fef
SSDEEP 3072:W5rQcGGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:W5rQcxm7Rkm1tYpBeh2BAoK
TLSH
T1D6D312336D75B9765C69BB8EF08E1B1F1EF149B2C830DD52C8D89F0422F9AC90A44A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 15276bfbbd23d78f607cf0c65ba97adf0b00961a7f5a187c4b0568d8cd6d3fd6
MD5 61ad3cc3b3e2432a235dfd41383b12c8
SHA1 2c864ebc6398c7a43ae7be70d211c40cf3ab4a11
SHA512 fbc865820f29a617ef66ea078624c34b57bd428ffcdba048705be6707d3252fab78662484fcca4528ea6597eee1233f0f765742af349085f443c1f120d331ad3
SSDEEP 3072:/Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:um7Rkm1tYpBeh2BAoK
TLSH
T1E4C3123B5D65E97B9979A70EB08E0B1F1EF149A2C920DE92C8D85B0477F97CD0A04D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 254KB
SHA256 a994e66a279553507a858e2bc1eb52e6b040fa5c736fa68c08aa5ca34abe4f6d
MD5 c65513c3037dc20e56e9dbf55d546f53
SHA1 dc33897542889fdc331eb4f663bf6b5d86a38be3
SHA512 ad27a464d52f0c297a6b6dc17aa6be5b70d2bdc5d845fde2aaa01d8306bde129354c59a04dd74cbf00e1cade8281e3579ce000f430a23fd7686b953fa461642e
SSDEEP 6144:q5rQcjMLBMkBCgszxMoEIwOgEyhm7Rkm1tYpBeh2BAog:3QMCPwFEyo9oBGcAog
TLSH
T1AE4412366D2299F628B8535DF0CE1B0F6AF04D65C824D861C4C73F48A7F6BDD0A94A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 dbdde4e1de01f15bce40068c68970183dd47003511796718b2e58f97844804ac
MD5 ae87a5f04b00beddb7659a5cd3e8748d
SHA1 1aba92685fea9793dfe6ad62ed3ff5651c7b7283
SHA512 e4fc45d1c4f39c33a934de1def1df36c9ce502e5a8b8f859febd61dcb3d912dd2b418722af343c6982c8c0fa5b23ff736dc7259167fd9e309491d4160390a453
SSDEEP 3072:AGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:rm7Rkm1tYpBeh2BAoK
TLSH
T1F9C3023B5D75E87799B9BB0EB08E0A1F1EF249A6C920DE42C8D85F0423F96CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 254KB
SHA256 d8403cdbb617099a6e5047442bc19bf44daa092edbc57290f5d78441d09e43b4
MD5 456a8564eaf78fb026b1a3ef9e3084b7
SHA1 78812c0b3fa449878411c37e6db6999598cc4500
SHA512 22a308a22356fc67e5a622b0eb5628ab3a32332056606bb72ea725dead75be73d0f2c6d402a9633f5336d3c227b8e64b4cff55422dea1c1de9ce6bb874b3850e
SSDEEP 6144:r5rQcjMLBMkBCgszxMoEIwOgEyhm7Rkm1tYpBeh2BAog:OQMCPwFEyo9oBGcAog
TLSH
T1624412366D2299F628B8535DF0CE1B0F6AF14D65C824D861C4C73F48A7F6BDD0A94A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 ea97935eebcb812fdb410f183e483e9779b494cda0be202cee8534724ed79fb8
MD5 fefa762e950e9a126c086f3e5a601888
SHA1 dfbf0f28c7f6014402e88afa5bbb9baeb5c0c650
SHA512 5dc8164ce653ed40eaea652ef85d219fda941e42a85f57d51d5eec85491520a6c40481e0e95008e3693977492b738d7c9cde44e618c3e05253c9706ba517cd88
SSDEEP 3072:eGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:5m7Rkm1tYpBeh2BAoK
TLSH
T1FBC3023B5D75E87799B9BB0EB08E0A1F1EF249A6C920DE42C8D85F0423F96CC1A45D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 14cca71a5f3e1845050a417ba3bd56ade7473456ca7dd645af24703a8b9e96d1
MD5 1ce6ad5cf28baacfd38127e26ba329c7
SHA1 0f0e88fa08c200bc98f87da61df7db0406f1774b
SHA512 69a23a58f7b86513af7ff899dc3e82c4718996a6056d7e56ff4a499354fcee415381049244062974b08bd067723ba7a7b498f4a136b9993fca68423bf78e9de0
SSDEEP 3072:mGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:Rm7Rkm1tYpBeh2BAoK
TLSH
T121C312375D65E87759B9BB4EB08E0A1F1EF249A6C920DE52C8D85F0423F9BCC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 4a4f0fe4d70addb2156982ac9c0ab1296365d2eca9ce182e2a49f408d3744b4f
MD5 93fd899a46d77b943d37f8a08d0cd298
SHA1 037cc9eb5d8b4dbe5e08680a9177822a5a23218f
SHA512 46600413c02aba2bcb48c21fe4e09f508913096a49192ccb53d5621e7026d0c23716328c6a7733d1ca8a3e2a79e3cd4fd9aedbede3df8d9cc1f6602d6ae259cc
SSDEEP 3072:sGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:fm7Rkm1tYpBeh2BAoK
TLSH
T10CC3023B5D75A87759B9BB4EB08E0A2F1EF249A7C920DD52C8D85F0423F96CC1A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 095cc387c42940723e8e8014210870e6fb6943289945a5ce2517ffbe36a889ea
MD5 36e652a3478665d5f668fce1b6680e18
SHA1 d68104a0b210cd91bb964d2dd807fe94a88551b9
SHA512 d57c32653b82a2ad02c54c467b9c5aec9b6d3d574b2c33d3c0ab7d78d3f9612d4febd704759fa95802639b97ef1b244026b28601c5110290581badd0eb42ac2e
SSDEEP 6144:i+MLBMkBCgszxMoEIwOgEyhm7Rkm1tYpBeh2BAog:ZMCPwFEyo9oBGcAog
TLSH
T18E34123A9C1298F729B8671DB48B170F5EF14E66CC28DC55D8CA3B48A7EA7DC0E44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 18c061206cd015bb2103989397abed6e0dfb57bfb0d7f64fc07795af1e9495df
MD5 72c159069f774f1ba436ff5cbdc8536f
SHA1 1e6d4c642551a0f7a5bdd4f022b0b61fdc9f8984
SHA512 f4de2be6363eae5c4eba3ec7d6c564376898ad14e239fcca920fcb97e6471ec5af7c9ace466a64b09305c30e2845516845a232a39052e0dab27651a74342e808
SSDEEP 6144:q+MLBMkBCgszxMoEIwOgEyhm7Rkm1tYpBeh2BAog:BMCPwFEyo9oBGcAog
TLSH
T1EE34123A9C1298F719B8671DB48B170F5EF14E66CC28DC55D4CA3B88A7EA7DC0E44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4d95b450c747e44a87599556f6a550ff9e8c3f70d7e639db4ba050b89440d435
MD5 38999419ddf91db3157ee96fadc08f7e
SHA1 9107554262c1024f8ec4ed84ac51fe4f8411427d
SHA512 ea225c5b080b216fe591331e41109c5fce87a18e11906a5fd40fe061646dd6fcb7cd4374f9aaaee58449f65c22312be6183361d8c8e9a0fe6d1517b12448c4c7
SSDEEP 3072:lGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:sm7Rkm1tYpBeh2BAoK
TLSH
T112C3123B5D65E87759B5BB5EB08E0A1F1EF249A6C920DE52C8D85F0423E9BCC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cd8e7fff20a68af392cfa2e92417b36934a0a9847c6568db73e97df0125fbcc3
MD5 d3422de059b6c9122c7cd879bb9373e9
SHA1 b5474cbaa77b65d4d52e33def05714684250eaf8
SHA512 8c6321e82ce2cf52c6010fbdd43f85b80ccffaa2bc6256ad236b70c3cf03b338edc9c074ba5fb2d3662500309b00c5a20444e82bea0d20a8620e2b2558334a8d
SSDEEP 3072:lGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMK:sm7Rkm1tYpBeh2BAoK
TLSH
T154C312375D65E87759B5BB5EB08E0A1F1EF249A6C920DE52C8D85F0423F9BCC0A05E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
Size 264KB
SHA256 9ee5cfdee6d3a6408d44427a009d59a750a5e25dae05c8dcd1582f3fe424b780
MD5 4ed9c925518f83dd2c74a096b836c2e1
SHA1 aae908033dbe0a866b87af157fc883d4ade5aed6
SHA512 4e8dfb6e1e208c448aebb8c4cebbf8c904987fabff951e590aebc61051729ee228a6791d454ec79877ab84ad862623d00f854208ee250b3e86fcd70092459474
SSDEEP 3:MsEllllkEthXllkl2zEXZ1:/M/xT02zcZ1
TLSH
T12B440405FFC00C15CD0015335415D3503370D4100511D7737D7504135DD75C00C04400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
Size 86B
SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
MD5 f732dbed9289177d15e236d0f8f2ddd3
SHA1 53f822af51b014bc3d4b575865d9c3ef0e4debde
SHA512 b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4
TLSH
T168A012078473800AE4184092C45C024114A480460119D0015070931314950CA03A5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ukm_db

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
Size 84KB
SHA256 d07b2e4118f4e2f80116afae2468b8ece3502f73baf97aee083233ebd62f7ff7
MD5 cfe62f80b1419d48a248fa81f98217ef
SHA1 e06373d6a200434a2f45b5566a83b77c7ace882d
SHA512 0bf4f60d80f614459bb3faf8e09c73afae99a78ee3050d14c18eb2e0f4950f6f92e583f68e4006c93d2895630bd2c26fcc8c8b6f1ea40edb047711bd69929653
SSDEEP 192:BUcCqdeljQwFEw5P3v6+Y1b8DvID4pEpwlgLOECMwDhrwX:BUcpo7FEw5vS+bDwcpEpwNMOrwX
TLSH
T16F83C1EAD30E6B7CF952D2B82C139895B58E0E58D57C92CAFD9CC8A1247400678C5DEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4200-393-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-394-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-391-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-390-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-386-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-384-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-395-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-396-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-392-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download

memory/4200-385-0x0000023A14DE0000-0x0000023A14DE1000-memory.dmp

Download