hxxps://codinaasscom-my[.]sharepoint[.]com/[:]o[:]/g/personal/marta_ullate_codina-ass_com/IgCs7b9t0EqkQIQMZmUE7frFAUIq3xDzAXneWqhrblPwTPY?e=OAwrZp

Analysis

user interaction
yes
max time kernel
720s
max time network
700s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 15:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://codinaasscom-my.sharepoint.com/:o:/g/personal/marta_ullate_codina-ass_com/IgCs7b9t0EqkQIQMZmUE7frFAUIq3xDzAXneWqhrblPwTPY?e=OAwrZp
Sample260716-s1shnact21

Score

6^/10

discovery

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2260	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286897660047257"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3068	chrome.exe
3068	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe
Token: SeShutdownPrivilege	3788	chrome.exe
Token: SeCreatePagefilePrivilege	3788	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe
3788	chrome.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 3788 wrote to memory of 540	3788	chrome.exe	85
PID 3788 wrote to memory of 2260	3788	chrome.exe	86
PID 3788 wrote to memory of 3700	3788	chrome.exe	87
PID 3788 wrote to memory of 3700	3788	chrome.exe	87
PID 3788 wrote to memory of 2532	3788	chrome.exe	88
PID 3788 wrote to memory of 2532	3788	chrome.exe	88
PID 3788 wrote to memory of 704	3788	chrome.exe	89
PID 3788 wrote to memory of 704	3788	chrome.exe	89
PID 3788 wrote to memory of 2384	3788	chrome.exe	90
PID 3788 wrote to memory of 2384	3788	chrome.exe	90
PID 3788 wrote to memory of 3340	3788	chrome.exe	92
PID 3788 wrote to memory of 3340	3788	chrome.exe	92
PID 3788 wrote to memory of 2348	3788	chrome.exe	93
PID 3788 wrote to memory of 2348	3788	chrome.exe	93
PID 3788 wrote to memory of 2476	3788	chrome.exe	94
PID 3788 wrote to memory of 2476	3788	chrome.exe	94
PID 3788 wrote to memory of 2064	3788	chrome.exe	98
PID 3788 wrote to memory of 1044	3788	chrome.exe	105
PID 3788 wrote to memory of 1044	3788	chrome.exe	105
PID 3788 wrote to memory of 940	3788	chrome.exe	113
PID 3788 wrote to memory of 3576	3788	chrome.exe	114
PID 3788 wrote to memory of 3688	3788	chrome.exe	115
PID 3788 wrote to memory of 3476	3788	chrome.exe	118
PID 3788 wrote to memory of 3476	3788	chrome.exe	118
PID 3788 wrote to memory of 1684	3788	chrome.exe	119
PID 3788 wrote to memory of 1684	3788	chrome.exe	119
PID 3788 wrote to memory of 4204	3788	chrome.exe	120
PID 3788 wrote to memory of 4204	3788	chrome.exe	120
PID 3788 wrote to memory of 3676	3788	chrome.exe	121
PID 3788 wrote to memory of 3676	3788	chrome.exe	121
PID 3788 wrote to memory of 3996	3788	chrome.exe	122
PID 3788 wrote to memory of 3996	3788	chrome.exe	122
PID 3788 wrote to memory of 2660	3788	chrome.exe	123
PID 3788 wrote to memory of 2660	3788	chrome.exe	123
PID 3788 wrote to memory of 3264	3788	chrome.exe	126
PID 3788 wrote to memory of 3264	3788	chrome.exe	126
PID 3788 wrote to memory of 1736	3788	chrome.exe	127
PID 3788 wrote to memory of 1736	3788	chrome.exe	127
PID 3788 wrote to memory of 3068	3788	chrome.exe	128
PID 3788 wrote to memory of 4796	3788	chrome.exe	136
PID 3788 wrote to memory of 4796	3788	chrome.exe	136
PID 3788 wrote to memory of 3992	3788	chrome.exe	137
PID 3788 wrote to memory of 3992	3788	chrome.exe	137
PID 3788 wrote to memory of 652	3788	chrome.exe	138
PID 3788 wrote to memory of 652	3788	chrome.exe	138

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://codinaasscom-my.sharepoint.com/:o:/g/personal/marta_ullate_codina-ass_com/IgCs7b9t0EqkQIQMZmUE7frFAUIq3xDzAXneWqhrblPwTPY?e=OAwrZp
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffed69dc728,0x7ffed69dc734,0x7ffed69dc740
  2⤵
  PID:540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,7521390683369403722,7489517923453585472,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,216989983761854779,16642204112882273152,262144 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:3700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,11503640239917277197,17141365066722927973,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3172,i,12558485481846430742,8097672886545588282,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,980212306424166537,958933477380106605,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3156,i,9868999130749744132,7390701173196901321,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:3340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4716,i,16573756664877081091,15573506249131800458,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3904,i,3017790922838489691,16492182664349914389,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,6345910143922531212,16142866134439041977,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5568,i,11461894914209426738,15708237329597538948,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5920,i,16529095915136473763,13593640564185798027,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,3253165278875708278,16192708031950334614,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5956,i,840342018374224570,7135577897429600796,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6100,i,10742871722132758681,12379262650344657180,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6024,i,4312616526469724443,6710880499540455395,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5856,i,667888450432247068,11141429422926118089,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3312,i,1355843306579306074,13120390831690616542,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6380,i,1852909727880984718,10534950242738712560,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5856,i,4132979310398187126,539333925012785457,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5900,i,3410032443773930101,1423857789903113937,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6392 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6236,i,3715929937116456616,9158750408662848115,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6732,i,5235746136570350465,3140378741616315762,262144 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5808,i,12077663402495499783,3823505623348863875,524288 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6948,i,8865714909876855069,18390601548602784688,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6340,i,1703167198595538288,15414580450351723224,2097152 --field-trial-handle=2220,i,11461218590345621230,10981832362644305784,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:652

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 560172a343999f71661ac26f011d2ac3b587be06f7b52605dd51d94eb0d90df7
MD5 581a95d1706e463eb8e2dda4addbf652
SHA1 d44e163c1267d87643d72d7820d410e498bc21b0
SHA512 96e3a0087a941bc736253ea59263cdcea977abb8c5892ef5a3e953a39b0ea9e119aa19c0290c43d9e12faaadc87750b94dd772ad0d4c64302cee4b00fdeaf81e
TLSH
T1ADE02BA9CC61DC2714FD0718B0145782EB54135B2B41999B7B3CC90C8FB56374585D2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 bfd5bc8756c738e71b8fce238183fb6cba73a0a25bc0124dd1868218466f1c38
MD5 7be4018fcebb1d996e5426628f9383ea
SHA1 2fe212927f33d5c0f4dbe594a99bfa0f58216ec6
SHA512 13456d460f40d02af4f3f56eef25e0798b7600a2b80597b298a43ce8bf7af74ecda445fe297d3c3b09f8b0f4089c48c8913a3d0a0c543c1e55c6cd96164d1184
TLSH
T14441314389D49803CF282CB530923DB2F92590DC95A32B2396CD6275556BBCAFDD472E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 46a1fa5082f328ee19815346d23eab61eceffd722b8832138a8fa23c7612a863
MD5 6f2f84ebbc7e741a8fd6b4b00b9d6ad7
SHA1 d865e5b22282fe2c99d6f6ebf3fb9baef4b057f4
SHA512 e577ea0d8aceceff00c307fb516ad3ab05b96e4071a1037a6725d38502e0f35f74a69b8b9c2d3138bcb7aa01222fae198fa2c4aefd2f2e0cfdd9f534bce927ec
SSDEEP 192:DDir+eLD1wfpweaIciu+105D5EFkaIaydyu8DrEOMG6inptL7r9HEuY:DDir+eLD1wfpweaIciu+105D5wkaIayH
TLSH
T174026BB7C3E48A2FDA11A1F5A7157D1BCEBD05641B6C386285D8EE8A43E2473F14160F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 d42c11992c1b10d7781ba22f1563613fe9e3f0d8ce1c079bc92effbde7a49011
MD5 0c9449348d89ee5e49aebe3290672ec4
SHA1 c226a97e9663a46b990a3d574ffd9603ebe41be3
SHA512 0b76468c5c10d65028024c20f154fa1311d512b74c19db030e521d6f0b6bb52042d1679f92701950ab58e87fd872b3eda4d56af6bbafd7c28766dc279e873192
SSDEEP 192:DC6HVp0SwKOaIaEd1fGu+115WnT5EFkaIXYaydyiMB8DrEO9aEHuaciY:DC6HVp0SwKOaIaEd1fGu+115WnT5wkaq
TLSH
T1A1029DB7C3E88A2FD92291F5AB153D1BCE6D0564176C386685D8EE8B43E2873F24150F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 e7beeb75495670cfdf800ae7b5e9f4e0e6fb2c401ae5c1f7b123f38a5a0aab9f
MD5 e0abe1b0afb812f6908e6fec9e706c4a
SHA1 d8ee6fbd30084a84997ca44754f765053348c1de
SHA512 a1da3c507eab92d46aa14408aa374bfe3dc877f2460e49dae041c060c73a54e2b80edbd61d6ac23f33ae5bc0360f3da76b5783145e259849f6dfbd291b723819
SSDEEP 192:DC6HVp0SwKGpweaIcGu+115WnT5EFka5YaydfMB8DrEO9aGXcFH19ZIptL7m:DC6HVp0SwKGpweaIcGu+115WnT5wka5V
TLSH
T1DD229EB7C3E88A2FD91251F5AB153D1BCE6D0564176C386289D8EE8B43E2873F24160F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 531c6406d61f1353ecf667bae30fb2669fade9c0d578e45d3dc393d1756d23ac
MD5 394790644bc08252bdf7b62cd8116fc7
SHA1 9d5be669a6408888892932dbb63699c8f7bdc87b
SHA512 d2b280ffe701120f82e5c13f0694357ef29cf9593115ecf9ad96772972b6c4223410430dc4cb33f69d358ce458e4a2e2f3aca6ec3061d59ed31434d8d13252df
SSDEEP 192:DDir+eLD1wfk0GaIciu+105D5EFkaIaydyu8DrEOMG6i1pEd7r9eHuY:DDir+eLD1wfk0GaIciu+105D5wkaIayw
TLSH
T124027BB7C3A48A2FDA11A1F5A7157D2BCEBD04641B6C387285D8ED8643E2473F14164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 4KB
SHA256 eab1ee0c8e6325bf6b241106f0bb4117c047e73920211b86716cf0eeabe9053a
MD5 673be30f7fbf86263849abede9109f04
SHA1 f26f01e5fcf87f3ba850558b50025af3f795e07c
SHA512 a3d6acf7c8022c41062f6516b2c6e7f9f6f6aea4131260365c412ba1b64e94a9c3d8e318c0c876da9c44faff4a2442758b2c84d13f8d85c7a049ecba3cace035
SSDEEP 96:RUL76UVU3UGUdUUUjUaUbUwUaUJbQUSUiU7U7Ud3UbUK+UzUV7U3UKtUxUiQUM:RUiUVU3UGUdUUUjUaUbUwUaU6USUiU7m
TLSH
T11091ADA7C7FFB857207D48AF0D0AB8596AB9B8320291A8F5DB9B917CE045CF30612057
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 746ddd9f25c658c7d15263be143442d241763dad6731fc4d89ad415715ce7a2d
MD5 d27300c0c6febbc2ed9f1d11445e9bac
SHA1 d1b59072256e9f7780c94faf1fecc7d50f1521ad
SHA512 ad0f39a00a28fcdc55f4fd7eeb7a0a80585cbc63e481d9a0eea9458eadb7e8e20d4640ed3f55b6e1ab41ccff691c5022795e087dc37d71546960f342249efba7
SSDEEP 192:tRhDbZZX4jiv70pPPRpXTdenN+y9+Hsb+WNnIPwQ3Ewp25FDAEVyIsnAUgE:tRhDtZ2ugpXLy8wsnEU25FD9E
TLSH
T1C652A42ABA506E7B6CDFC269F8257B53D3F6102226A12E84E7FCCA1C15E75CC2127017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ced23dc4d625f508b4f93c27b253a15c067bd507f8fd76604cad7fdbd56738f4
MD5 81e98ed3768fd327dcfe4e28053ed199
SHA1 7264569a33a2376cc51f48cc0fd074787888ef3e
SHA512 b1b059b0fcc5d3a006154fe907aa73626c5dd94130b5fefa6d027d158e458529566d6506436935b4b1b8eca590836462fac0014d9d0f704d1758184668197941
SSDEEP 192:IRhDbZZX4jfSv70pPPRpXTdd+y9+Hsb+WNnESVMIledp25FDAEVyIsnAUgE:IRhDtZ2f+gpX6y8whuWef25FD9E
TLSH
T11752A52AAA506E7BACDFC229F8257B53D7F6102225D52E84E7FCCA1C15E75CC212701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6fb9401f0bf51d50460a6512b74a3a862ceb4423b35f5012fa799ec3d8149699
MD5 cae3b84c8e03a431ffd117a5df1c6bab
SHA1 888712ada70cb724920d81e531273e826617ecd0
SHA512 2ff90f7c3a1e97a149e29bc462528d8baf210c3d500683400e3a70347624facf175ba1cbf2f508d0bbf5b0be1f34bab97783af92920b72dd0133a5ec9512ede2
SSDEEP 192:IRhDbZZX4jNSv70pAPRp2dd+y9+Hsb+WNnESVMIle6p25FDA4VyIsnAUgE:IRhDtZ2N+gUX3y8whuWeG25FDLE
TLSH
T1BD42B42AAA506D3BACDFC229F9257B53D7F6102225D52E84E6FCCA1C15E75CC222701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bba9aca55fba796b140d0e51ebc9634e1cd68b0e0f36827088730a3861b675e0
MD5 660b55d755e2d79ddca3e24a72bf836d
SHA1 8b9129a30fd19dc3c65ff017f8033cf686e3ddc3
SHA512 3f5e1e8ee683637a90dc866bce0dd5a23ab9ad6356eb3592d858a75e84119ee03e3a95e6ab000cefca4d29e4bb05029b997f18d9de64a17d6283cb962910d4f9
SSDEEP 192:tRhDzZZX42nv70hPPRpXTdYjnN+y9+Ho1Vfb+WNnIPwQ3Ewp25FDAEVyIsnAUgE:tRhD1Z1vgRXTy8aVtsnEU25FD9E
TLSH
T16252942AAA506E7B6CCFC229F8657B57D3F6102226A12E84E7FCCA1C15E75CC2127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 56ea5cd915d06cfd66fa0ac14d4b27a8cd5d88764affa94f976abe1f82952f2e
MD5 8177429efedad7f06f6a655ae2dab966
SHA1 a90b32c7ac04d6876e04ab9d8d6a3a15a7628931
SHA512 ea3fca95f5337c196f4311afa0e2f0c18bb5461224eaedb77c16e8ea39d6768b46a781b551584d240fb4cf3ceb0aa8dc8eac608b42fc9b45640e64393db33d63
SSDEEP 192:tRhDbZZX42tv70hPPRpXTdYjnN+y9+Ho1Vfb+WNnIPwQ3Ewp25FDAEVyIsnAUgE:tRhDtZ1NgRXTy8aVtsnEU25FD9E
TLSH
T1FD52A42AAA506E7B6CCFC225F8657B57D3F6102226D12E84E7FCCA1C15E75CC2127417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f51b0df61ac5934c5fa5390ddeb663366b2a732c5e1b3f360ea21d7d616abc48
MD5 b03050e394a16d8d5e5a7cb3efcb207a
SHA1 1d21d318a0d083b1b84bdcb0e98aa6e25454cb30
SHA512 06ca14974f2699673ae8da2d8d3c9d53d6d2a4974abe70812a59dd318dc5191e1cb09014e19db46fde0c56775d9b1d4b4884d4114e415f7c16ec8b500e153ef4
SSDEEP 192:IRhDbZZX4j/Sv70pAPRp2dd+y9+Hsb+WNnESVMIlepp25FDAkVyIsnAUge:IRhDtZ2/+gUX3y8whuWe725FDLe
TLSH
T19F42A32AAA506E3B6CDFC229FD257B53D7F6102225952E84E6FCCA1C15E75CC312701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 b111210229771f49c6e41bdaf3a74f3a36ce2f863921360b743f65facd7b347a
MD5 b9ae068580349e774530b748df582199
SHA1 8020e19a27aae0684efb78e31e6eb171b7c17588
SHA512 e61b11b6d0b54bef3e554738953c39a5027c0e545779bb59c0c06baa024cefd93d6fba2ac426cc928b0f0a5dfc930d349db14d6a7aee524d915ade2a58f5a735
SSDEEP 192:IRhDbZZX4jMv70pAPRp2dd+y9+Hsb+WNnESVCIv2/p25FDAkVyIsnAUge:IRhDtZ2YgUX3y8wh8g2R25FDLe
TLSH
T1D942B32AAA506E3B6CDFC229FD257B53D7F6102225952E84E6FCCA1C15E75CC212701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9a63a02af86b793bc7723ea8579017000fbde21723150ca89cdaa0102d54150d
MD5 3db4d2ed90c53237037f403d9b6c10cf
SHA1 91febd0c861f52fac9b9c081f7e738838423da4a
SHA512 20a5acab3273b075187518ff1d84bdfb24fb19e0881b09c9805647d3b805dc5e2037a9ee22124705cac465e1ac8b91972117ed00cd2d49a563818ec658fd5de0
SSDEEP 384:W4jyR7KxkXqKf/pUZNCgVLH2Hfgsl/97pLuLcSjIpXODyJ+ErU3MrHGRxVJZU:WMyR7KxkXqKf/pUZNCgVLH2HfgsR97p9
TLSH
T183720A676C488E7B0F98CACCD8267B4FADF5024B65E9886453FA582903D5BCF11091FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1b9b30cd5532113bb0a6a2dfacce45cf2cee80e617c2b54fa96f1adefc7faf11
MD5 825c6d68c279ec05f2277e7307a1d1f2
SHA1 14ff0bb3258ff02b5556147f477adecce398d799
SHA512 39587870421dfe075ebf374abc7479aa43ea767aa1c3e18b81357bb2b99eaa710a65386cda7e029ac2252a917ab6bee871d4f42831b26d3e6b3045a43bdbb9f9
TLSH
T199B01241C4419102C14202B023C2288871185F14970E170543E06972C83E5628014055
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586f5f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586f5f.TMP
Size 96B
SHA256 6a1ca4e64f406f29468bdcf35fcc77a10f113c329bbdeb8ff89c2d370f6dc1b9
MD5 ae0e5583adbe95ac82eea5cdaa5d544a
SHA1 86ce185d4010ff4ac4c2443f8333fb052bec3faf
SHA512 c35ba4e8e962b2611ec8c41c7f4d87057cc3eacf27c98f9d604181635ac4f82fe4c5bc17e03b0b62835674995d9a061dd02916a317bd394314c8f203041eb052
TLSH
T11DB00256C2077213D04207B439B5D5D87160DF77D643365292F01A66DC2667245AAE64
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f623430016a9d565f0597ed54d0b2261150056d180bab568ac157adff5b73642
MD5 5f2e6ac3483602ec700238c11b46213a
SHA1 8f1a8a7524c89ac1bc66ebf68719f791b2146436
SHA512 6419954f3c49a86e6f7bc936eca6fe21e472e9811d8f7b384e8b1db3ae9aeb8ae5d323aaf98fcfe74e7481dc6cac5adef9269f468b1c450c12cf37b465ea7c6e
SSDEEP 1536:44KyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:d4qfd7NtZL8cHQRZEQ6Sps3
TLSH
T10FC30237EBC21E339DD3DB60B5130ED693F644AAD034D305AA7D3BAB7883451A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 96f0d4d2ff1084d85d1ebb87bec0319b47450f60f6aec924b07b870e494d9fe3
MD5 db17577daacaa956ce12efe7e2aedf8d
SHA1 62eb6edc5510902c7069d80f84fc710cfae6ca7c
SHA512 7e1275e8a401fb62d81eb5a5b08638d752ae26df5c232ad23531aead878ac6b2edb12c068487750a4a9d7ed8fc9294419537049fedc83aec1f2caf64a42db3d0
SSDEEP 1536:44KyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:d4qfd7NtZL8cHQRZEQ6Sps3
TLSH
T13EC30237EBC21E339DD3DB64B9130ED693B644AAD034D305AE7D3BAB7883455A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 47cd3417258d1e8cb87c7a6be2af7708232bf5717142a43adb94f232a26d6a9c
MD5 d0ae39248935f0f5dab2b0e91de3c376
SHA1 f1cb5e9bd6db19994ea77092e0e19ee172b9ae2f
SHA512 b4aa0164bba651709815e917a1a093165b7aa2caa2374d8bb73ed9a79a7f594a9a2e5760ffcd0c35f42dec9952543cbb2ad51c8082007739a57d67d2958b6dba
SSDEEP 1536:4zKyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:G4qfd7NtZL8cHQRZEQ6Sps3
TLSH
T1D6C30237EBC21E339DD3DB60B5130ED693F644AAD034D305AA6D3BAB7883451A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 b76f1602b8642dbce29cdee134a9f99d28c1e2a389016fc5d9cf27e4e2a3536f
MD5 027ff9db1f987ee2974792b822c9e3fa
SHA1 75561a5dfa106ea6f43aa714d80d767dd5a76f48
SHA512 d2a6f90910ddd388239d6a136dab0533bc2a6c5de934f3c4dc56f7f3e2b3a738c9af6b71086807f1b0c2041958a9578b40830b3e908740edee9c4ffc057edf17
SSDEEP 1536:4hKyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:04qfd7NtZL8cHQRZEQ6Sps3
TLSH
T1ADC30237EBC21E339DD3DB60B5130ED693F644AAD034D305AA6D3BAB7883551A48249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2f2886f0346a2e01eb53dc38308cba8c024c882eefdbda661fb65bd78de7f7b6
MD5 5332891d0ff8218de8e2b614e754f7ee
SHA1 f759b0e55648bf095f5a9829507e5bed408b6562
SHA512 76858534c49bfdf7722e6abcf06a0b33f68f2b4dfc26c129f147fd9c8075f256fbce5815fd113423bd4b0bb97185f6945697cc253102bdfd99b50ccab62d1400
SSDEEP 1536:4VAyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:MCqfd7NtZL8cHQRZEQ6Sps3
TLSH
T1FFC30237ABC21F339D93CB64B9131FD797B644A99034D301ABBD3BEB6883591648249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 3753be979dce7d7a5c313d3c430673b8304b0d3df8890a120320ac19fd9e911f
MD5 cec4682cbee53134fdb87a85f4348b07
SHA1 f4d5582fa2dde4ccc6e6124d260fdf7bf3424d62
SHA512 52c93e5713ee62974664b81a863c7f3582ead003954efaebe550f582a1934123fa0c683959130c648ced7e48105c7b50a582ea409c9b3108e06335bde16d2d1f
SSDEEP 1536:bpLyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:zqfd7NtZL8cHQRZEQ6Sps3
TLSH
T176C30237ABC21F379D93CF64B9130FDA97B644A99030D301AAAD37EB7C93591644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 734faa6d9c5db8562a9b1b5e2ecd27b25d0d34d700eacb6ce1b3963cfea64122
MD5 8ddd1cb45ab883a100955bdfb77a04fa
SHA1 4c92d2313e73a0692b39bb47c4bc3d92054b422c
SHA512 dd7b1c7d2b94f4a60ad814f44024528015100af581a5334ce1a5e57467dd3cab559c5302764da988cf494bf7bcec898a401b79ed84e7b35b6070b9d12f758464
SSDEEP 1536:lVAyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjY:LCqfd7NtZL8cHQRZEQ6Sps3
TLSH
T181C30237ABC21F335E93CB64B9131FD797B644A99034D301ABBD3BEB6883591648249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download