417c25be448901f02677690a9553b604194cf6f2601b6393bfe71cb63601bb2b

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 02:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Counter-Strike.url
Size 218B
Sample260729-c48faafk9s
SHA256 417c25be448901f02677690a9553b604194cf6f2601b6393bfe71cb63601bb2b
MD5 578cb710d9e684deba61edf7a28e8f0d
SHA1 0c706224eadeb63cabc87a08546508c48149f852
SHA512 d5c07830fb26ae530c40db00e769be3c3ea84252413fb0dc952ea4fda54f32ef0a0b00b1b1aa5f42b163520276e6fdc31babe8c87caa2ece8e36dfdc2295d303
TLSH
T1B6D023644A46C1D1D3D3D41F00B5BC426D4CF6D209CDD86D22C5CF4E0C944844847714
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4524	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297663637675212"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
3412	chrome.exe
3412	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe
Token: SeShutdownPrivilege	1440	chrome.exe
Token: SeCreatePagefilePrivilege	1440	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
5072	7zG.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe
1440	chrome.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 1440 wrote to memory of 448	1440	chrome.exe	88
PID 1440 wrote to memory of 2416	1440	chrome.exe	89
PID 1440 wrote to memory of 4524	1440	chrome.exe	90
PID 1440 wrote to memory of 2416	1440	chrome.exe	89
PID 1440 wrote to memory of 2392	1440	chrome.exe	91
PID 1440 wrote to memory of 2392	1440	chrome.exe	91
PID 1440 wrote to memory of 3516	1440	chrome.exe	93
PID 1440 wrote to memory of 3516	1440	chrome.exe	93
PID 1440 wrote to memory of 3384	1440	chrome.exe	94
PID 1440 wrote to memory of 3384	1440	chrome.exe	94
PID 1440 wrote to memory of 3984	1440	chrome.exe	95
PID 1440 wrote to memory of 3984	1440	chrome.exe	95
PID 1440 wrote to memory of 1936	1440	chrome.exe	96
PID 1440 wrote to memory of 1936	1440	chrome.exe	96
PID 1440 wrote to memory of 924	1440	chrome.exe	97
PID 1440 wrote to memory of 3584	1440	chrome.exe	100
PID 1440 wrote to memory of 3584	1440	chrome.exe	100
PID 1440 wrote to memory of 5024	1440	chrome.exe	101
PID 1440 wrote to memory of 5024	1440	chrome.exe	101
PID 1440 wrote to memory of 4980	1440	chrome.exe	102
PID 1440 wrote to memory of 4980	1440	chrome.exe	102
PID 1440 wrote to memory of 3496	1440	chrome.exe	104
PID 1440 wrote to memory of 3496	1440	chrome.exe	104
PID 1440 wrote to memory of 2784	1440	chrome.exe	105
PID 1440 wrote to memory of 2784	1440	chrome.exe	105
PID 1440 wrote to memory of 2240	1440	chrome.exe	106
PID 1440 wrote to memory of 2240	1440	chrome.exe	106
PID 1440 wrote to memory of 3440	1440	chrome.exe	107
PID 1440 wrote to memory of 3440	1440	chrome.exe	107
PID 1440 wrote to memory of 4800	1440	chrome.exe	111
PID 1440 wrote to memory of 4800	1440	chrome.exe	111
PID 1440 wrote to memory of 3548	1440	chrome.exe	112
PID 1440 wrote to memory of 1248	1440	chrome.exe	113
PID 1440 wrote to memory of 4196	1440	chrome.exe	114
PID 1440 wrote to memory of 804	1440	chrome.exe	116
PID 1440 wrote to memory of 804	1440	chrome.exe	116
PID 1440 wrote to memory of 5032	1440	chrome.exe	120
PID 1440 wrote to memory of 5032	1440	chrome.exe	120
PID 1440 wrote to memory of 228	1440	chrome.exe	121
PID 1440 wrote to memory of 228	1440	chrome.exe	121
PID 1440 wrote to memory of 1316	1440	chrome.exe	122
PID 1440 wrote to memory of 1316	1440	chrome.exe	122
PID 1440 wrote to memory of 3316	1440	chrome.exe	123
PID 1440 wrote to memory of 3316	1440	chrome.exe	123
PID 1440 wrote to memory of 3440	1440	chrome.exe	124
PID 1440 wrote to memory of 3440	1440	chrome.exe	124
PID 1440 wrote to memory of 116	1440	chrome.exe	125
PID 1440 wrote to memory of 116	1440	chrome.exe	125
PID 1440 wrote to memory of 1728	1440	chrome.exe	126
PID 1440 wrote to memory of 1728	1440	chrome.exe	126
PID 1440 wrote to memory of 4216	1440	chrome.exe	127
PID 1440 wrote to memory of 3412	1440	chrome.exe	129

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Counter-Strike.url
1⤵
PID:456

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff95561c728,0x7ff95561c734,0x7ff95561c740
  2⤵
  PID:448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,43723283519284580,4242373226417977722,262144 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:2416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2080,i,2259725987794713112,5700411025492199740,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2108 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,10540741315001344735,11331122274087711669,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2424 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3300,i,336556139549736293,415035617892699798,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3272,i,15182736340121713573,10751770306022486320,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4392,i,16385911849050331,8532486729241565357,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4468 /prefetch:2
  2⤵
  PID:3984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,9242966342231053952,6695869770668245924,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5540,i,5410242406677763332,8529481887154615765,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5708,i,9534415250327520896,4580484358498999232,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3304,i,1761058773545127076,16324087540127797856,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3644,i,6015073641555682246,15828463670459218130,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5864,i,4315925195741784419,12619316375205550104,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4856,i,15275090556249994304,12673950470412098201,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5892,i,7495113292027419389,17627985263439376004,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5996,i,10993619656545968282,8622216676346864838,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3304,i,11424999628730133585,16916476188027975342,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3724,i,4375500695396704672,11897768039061608296,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3696 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6084,i,3068705320745132457,13455861567224355603,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6028,i,18015186629562985141,8724555582055797246,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3896,i,13409877044252158367,4653097090463361883,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=864,i,17914264585096635690,7680274064855542419,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4772,i,7003827530342875422,11300675798658804249,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3316,i,2210160848970356430,13646913031114982839,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:1316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6804,i,8985027668143626131,14105620582612881306,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6824,i,2498593742329808068,8881510751397468211,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6972 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7112,i,18035990088077344362,299399745995426178,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6056,i,14597682012268322717,7073415093000017267,2097152 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6388,i,2633275439849117303,14107411937706522726,524288 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6208,i,15502356649224279799,10243710926483773033,262144 --field-trial-handle=2000,i,14742391746261002638,10347759228717259485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3412

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:744

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2076

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4904

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\118_Kz_Hack_v.2\" -spe -an -ai#7zMap7622:92:7zEvent13037
1⤵
- Suspicious use of FindShellTrayWindow
PID:5072

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b3d0c62ea38c57fef30933994ee6e4f72455f107d6b75a717f381f71d6723067
MD5 e9f94d01931ff7a94df5ad15410f3f12
SHA1 5c5b0df565c4c0243da3dc515cacba98e83d04e9
SHA512 61fcb8e7a8946e16a1986332739524627f30de2b2f3b843f2071e85417925378a942b0131868401282b6f00935d4d60921dcc759be73f84d82ad8e3f5c5cf683
TLSH
T1DFE02BAACA20DD2B08FD071D24980647E655331B2B50556B3E3CD6098FB9A765586C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000029

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d
Size 17KB
SHA256 88d0b1a2004056ca341acf1ead5dc45080933b4c4a3f3ae07b2f0aa753325c9e
MD5 eef0c56076e081054b8aa8b0ec8abf7c
SHA1 77f0df4fca2df3efd03a86ecabdee027902cec05
SHA512 6c0304983baeb528a941668d33a8260294f68aa8072839d2fb0459425463f529b490e8027936a1eb35509798fe9d0973ccb3d53ef12f089793ce732b0a4d9f36
SSDEEP 384:/ZOicMJyUjgOs8uOHzJm1IicS/aBSaGLSCcJ9vYiGzznN1Zu31yseE0U:/ZOPpr7uJm1IiFCJC2GzzDZul/eE0U
TLSH
T17982D0576A193DE5A0BAB71B4E29915B68E96613C70B3074CBDA58DF71700F036CC5CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000039

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
Size 69KB
SHA256 5e8e508e763e3775193d964bb40b05339f621b26e12a3922e297bbb8de7502b6
MD5 6fc4cbf8edeea69e12d7be8ac70d0a71
SHA1 b3f67f1a88043a23db0c29aa763946481edc4d78
SHA512 186d6e090061f4b75aa3c39f00184f6f47390b1bd8ee4fef55c936327ed298b761f2f2bd4b104cb60361eb3901daf51a86eba2fbb78b5e160be0c4b68ed3640a
SSDEEP 1536:42ONeX1mMA6yLp72601sepc9cX3itmIrW8u6QWXfbgS56GgiKXGig49dr8:42ONeX1mM3yLpDrV9q3itmIrU6QWTg7y
TLSH
T1886302E0BB61262A77329635A00892768E73855501F118D77CDDFFC68B839EABC8E506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b26a5dde9e015e4_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2b26a5dde9e015e4_0
Size 60KB
SHA256 1cf80aa48a2fb42b864e23b036dfd72d18ad72610133d4e1eab33e21481d6262
MD5 d3f355ee534d71a1303f9185725fcf04
SHA1 19f16d50d93e576b0e690395b0cd6f405fb0b793
SHA512 0f4d1218349c47232d9324e3ae888e45695c6c26975d04f8ad1ec28ef28ce0f319988f551521b7d5b076c53c0959ffd044ed5e7e54aa4bbaaadee2895c5070dc
SSDEEP 768:qvElEAjA6eGxaGBifEHI5cUM6DlSi/FEznRvpO0VG0+bOo2:qvElPjA0sGdo5b/F2E0+bF
TLSH
T19B53C74A7385F9ABCB2393F942638D6B3238455D3EE7D30B21E1E7251C8A2E95C54C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

336a68eaaf209f48_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\336a68eaaf209f48_0
Size 309B
SHA256 ce1d47271a9830f7b9283334acd421c42ddad2315cf460f992f755442e1abb3b
MD5 58bd751433b5ba7d93c8ff0b606353dc
SHA1 36b6f558ecf44d5fd5609498ac4d55a659ec2cef
SHA512 792fa25064e36e0e87863e3b2ff20db91e1c1ef80ba0f9300d008bb167dfaf5b336914720853a035e2a747c5de6eb9dd12ffbef30897c38201770986ef16afc5
TLSH
T1F4E0E7F359447095D6FF89F0D920139E451334FC38D54D4B3004C0111113DF493C1161
MD5 SHA1 SHA512 TLSH

Submit Download

852a81042e362004_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\852a81042e362004_0
Size 328B
SHA256 353ea8cc116465b088d84e5003165351f2ab4047f15abfdbb733dec404647313
MD5 7d2ffb7c3856b48b360ba2fc989634e4
SHA1 2063a9327f9d7aedc06122921ba880410d225438
SHA512 56e83101a150236a75a1da962ebc230cfcd6bc2c9423db0ced5bb55995efc3e619bab04ceb1e24650a994c90071c6971c3526830c3ae9b03f775662226648c9e
TLSH
T17BE07DEB8920DC14C7294DF0A3B58312D45394B14F9854FB8452D0A3E21042771E6752
MD5 SHA1 SHA512 TLSH

Submit Download

fdfae9af6076d3fc_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fdfae9af6076d3fc_0
Size 433KB
SHA256 3446fd7e0869f3e4e03ddab007fb7d0c0827bfe9b651916f013b990ff4731a13
MD5 bfdd7d7696bf224979acea24bd0f61e5
SHA1 b21605cd5515de712ddcf2203b1455a3f63444ea
SHA512 45d2ef3c5c15280b8a08439d87cbe24ecab4b300df2971e6368ff9694fdc26b5b9b373f3f1aa0c533373d6c424bd8930b3f739e2cc9c81176ddfd6354d66c13b
SSDEEP 6144:3tssrIMTfPZbBN5nazrzZUzRt0Vh7DOsNfRxvI8bxM2cxRbif8HkceU32zXSGW19:/rJTpM2aOsBQjM5EKY
TLSH
T12094C504AB926B73CF3697F552A3895B3335404C3FD7D20722A1D7392C292EADA56C4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 b6b98e594c7a3046178ced2fac6ff531b32ff2dede0a06e2b3da656e324b003e
MD5 ef8fe83b3d09377e853c19115268a1ce
SHA1 f8926b6b4bb87feddcbba2d1ad4a4076d1456b30
SHA512 35d230aff82450df898e6af1e8b5600288b66157f89a70a61d4c64cf397f5bb3b1730426291f969a60971eaedb06a3f8d28c32eef12bf13c789cbbc6d29bbf8f
TLSH
T1B041DB2890A21D05DF600039B4C7CC1FF5315196BA7BAFBF6E0294F8294E79620F2343
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 5560aedc0508fb8c2c3bafbe262b3f6b42f18f6510b654125f80f4f162a9c455
MD5 fed2fcbca5aec960e562e74bee9ba102
SHA1 6d23b7fd6621e9e5b1b2bc3fc20fd03f887aa843
SHA512 3f7c519b235ad53e9f8c251f908c66b20d7fd1a084a39cdef7b8aba75ede41e67cc1bb7e042b9ff5e553606dfb7bf5294bafd1f06e327470eeb67ec08c6f4cb5
TLSH
T16C215612C0B21056EBA5013134D2D81DF93161D29A7FAFEFAF0351F82A8E7D61036693
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\http_hacks-cs.clan.su_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 74a140c9cada9a98cb17bbe968f37a9952779bb1152ee225c58e4017e53acbb6
MD5 5085df642af3aae8df3e2e3832ca19f2
SHA1 4d8446923e8af68990579a6cb6421da5f872f22a
SHA512 a54c2175c6959c218d13389e0b5f36a2f89429b5cf4f752525710133f872664f7f6a31dc9e00f5868025b92eac0090d7c4d2e959926518290f432d4f301f6d59
SSDEEP 192:DeB/KQbtpJ6JSJOJMRaIVV1umadWhxxIeIHNPuUaP1NsIRsj0Fq3aHTSdVn1cl1M:DeB/KQbtXSSJOJMRaIVV1umadWhxxIe6
TLSH
T12632CFF7C3E8867E894156F4EB152E2BCD1D061A432C3D1786D8EF4B53E19B1E290A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 8631772c0adc683a94397d30936406bcd041f7c11d45226586075001e5b2f9e8
MD5 ad286993a393a2ee43c1e5dae1773899
SHA1 1d19ab5ecbcd22849f067ca09c53e87918b1f918
SHA512 f3728794b596715dd07c7c6c4425d3c9f8b339cc92e71aa0d4a2e78bce16f7569e56f94cb9b689ccde04ea1055e46a5a71bbe848bbc2a539e59944ac2763dde4
SSDEEP 384:DeB/KQbtXSSJOJMJc0DamC+aIVV1umadWhxxIeIHNmUaNNsIRVqITSdVqgRoh/2p:b62htSc/L0za
TLSH
T100A2AEF783F4867D8A1196F4AB146E1BCE1D0626532C3C268AD8BF0793F2571E251A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 572a1e685ffde515a8a4e5ebda4ad1e88a9c2a826c9d00f2dcf9fefc8595cb71
MD5 391c8ad49fbdf38b37d57073ba9f234d
SHA1 117e629aa61ad117852297a89b429a983a7e36bf
SHA512 afc1898d26bf86a9c280c3ad7b49cf41dd5d1420f1b319b555d44ca53c9534440ac71dd02a24329d57c4cd15bd5e75146f6c70ae48a7a24f6ba184886d983891
SSDEEP 192:4R3cBz0lUu4rNpun2v72ymhOgPRp97/cCaa4Qb95HdRb+WNbXd/R+DCAco7B+7o6:4R3mz0EynCQQCX997pelpL2K6aXe
TLSH
T14262946FA92419B78CD6D226F9117727E7B52026A5D41E84EAFC8F1C04E76CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 70cf1903e52be5381fd0f2724f4d0955bc37c92580317330dee3cd1d0b7580f1
MD5 5899941a725b9ab2e3b0b646f7009459
SHA1 04382056a50ed38ecf71fb0872f68f1ce0f03881
SHA512 ee5c412d437a7c2f630d7d277e1f8ff21c6592a08453831683cb2106d9bd87b2c57f0bf865be4cc4517c9160a5e2a940f1e6f179a28ac58baeeed85ec0268588
SSDEEP 192:4RLklUu4rNpuKv72ymhAPRp2/95Hsb+WNnR+dBQz8pkwRVyIsnAUgtaJ:4RLkEyGQ8Xo7wMdB6aX8
TLSH
T16942B62EBA14657B9CDBD31AF9123753E7F5102665942E84EAFC8B1C14E76CC232702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 d0ea6d606f7f2b7e137a334cef84ad628d23fb2cdcf2ba8dee18a5b1cd4c4231
MD5 11e9c90e99df37dc097959c0a742837f
SHA1 cffcb375dc1c56c4c13e9ef02491e1a5bdee93fd
SHA512 0ca509ccb8af060a453cadb85f992a1f08de2794685d022169855aecc4de7ce1c81296bd4ff1cf649d8efceaa3d037ab42ec6963b9a5b88ef618d856b1edefd6
SSDEEP 192:4R3cBzklUu4rNpu8v72ymhAPRp2MCZ+Q95Hd9b+WNQ/R+77o2/Qz8pkwtVyIsnAq:4R3mzkEyoQ8XC7lbo2/6abe
TLSH
T1BE52C62FB914297B9CDAD21AF9127B27E7F5102665841E80EAFC8B1C04E76CC331742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c9af6661d5dc65a26a98453064016a37911f7f49a399cf429357d7ca2bd1d95c
MD5 7b2b23962934c364013cc4aebc85915c
SHA1 4eb076c11221c229807900f1f82ac487545e0c88
SHA512 099213b4d5b34cd1846b110f6b1d350b7d237addeb6e3703f498537ca805099fb81a95e43edc15b470a8d9edb0a2ee021e919096e68431b4e0dd4e0dc0fdeb8a
SSDEEP 192:4R3cBzklUu4rNpuKv72ymhAPRp2MB+Q95Hsb+WNnR+77o2LQz8pkwRVyIsnAUgtK:4R3mzkEyGQ8XX7wMo2L6aX8
TLSH
T14952A42FB914297B9CDAD21AF9127753E7F5102666882E84EAFC8B1C14E75CC231702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ac6dcbca5725858d74927bd655ee93e6a2e1c17b171fa53b282beb5ae8d62ebf
MD5 6e72f4765593793c637756333ba19a17
SHA1 a1dd3b1df193f7bd755172e6d15ddee6fc34cf9c
SHA512 5a73ceed2ceef8c4b8db7f7138fb8af7d1f5c2ddbc5b41405d64c25afe5cc466e92bcdabda515e2922f937afb792efb95893c572bb6c4ea3ac83d920dd6717d3
SSDEEP 192:4R3cBzklUu4rNpun2v72ymhOgPRp97MCZa4Q95Hd9b+WNb5/R+DCAc/7o2xQz8pO:4R3mzkEynCQQCX987lCl92x6aXe
TLSH
T16C62B56FA92429B79CDAD21AF9117B27D7F5202665C41E84EAFC8B1C04E76CC331742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 ab6b84abe05244130be37256dbe19705fc41e696abe3d3fada41258d8966d0f0
MD5 1b65924de1e2e2691a0d6de729e07334
SHA1 cda987f245f2f10f685f0548999a763679409697
SHA512 c537f2769f3f9f6ae1fa90335ec20d613d5b837e75785d83e7091d51e59fd0cffafbb2f0ca4dbeb9acc40c0682cdabe21a4eed359455a59c0874c30b681cdf74
TLSH
T1CBC01201C0077141C05A03B11056D9ECB2189F36DE1B2B5A67F46A66E838121C026191
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 ae513722efaeca24dcae6dd12132294ea40011b652ed5071666853a84863d8fd
MD5 7ab6bc9a31b6c23ebb4127659f401d54
SHA1 0db0bb8091cfbc534580980b9bbc86204538af2a
SHA512 65e79a71635276eb6a818f0f549ec6885320c3408722dbe3f0a917e064586ba7812f64f1df2482e6c3c4053f21d17c10801c3938ae09b7109abcb9d108333216
TLSH
T104B0120080425501C44206F0116A649CB1646F16960E270143E07922E8261618028051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588875.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588875.TMP
Size 96B
SHA256 4b437e8c0c3882cc0b2782f073988df1ab846cf1ab7ef2416102730d0fd48772
MD5 fb257819904e0863e328836b7ea0d26f
SHA1 d0333cd4266c1e50456525c4b237cf3f394989c3
SHA512 630484ad1cb25abe49023fcd79f4d108802c3700b4405b6a6f15efccd3f6825e5985a366731c5f7ffd03e22d5218e8a4276772acbfaeda0acc1dbfca02fc0cc8
TLSH
T17CB002D9C2026612D14603B02596D5D8B260DF26CF175253D2E02B76DC356724535970
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 3ad683f21b9e1756cf5a0a68d2b150687cb69ebc40e98579bed68a891281612f
MD5 52eae7b2ce7b500dc48e3e03bd58dee9
SHA1 76e1f4b3d136e2584cd903910b15ea124de73ed4
SHA512 62f778cd972ff3de4c69aabf6441e65c670e870ca7107a78b460fb26c74d07adb74964ec790cd339848b23fcf811ffbb027a7b7ff4d672d52f86a118d95c4d92
TLSH
T1F1B0110020E02802C38803B023C280C2333388A00382822B80AC00A888222A30228200
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 2d8e4abc6155a89779563549a19d8cd20dccec4ecfa3a4ef35322b56c0e58450
MD5 1595eb68fb0a34718b77858c9985857f
SHA1 ef4a65329d8943d656554bf18e13edd4e80f71b9
SHA512 36613a373b79a7398d8ba73e16b69032a662358522316385a14156a44b7b5caa01e423e8c3aebe624291cff5cf033419603d6e010ad59fecff1c59f197241ace
SSDEEP 6144:FTnHtn0lHp05ayxQQdv+m4UwqZ/ZLW3Ex1:5nNniEKQdwUwqZ/piQ1
TLSH
T1E03422336EE31E33DEC6C6287E171D1D5EB11F6BD830C144BAA83B9BA9069915C074E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2d4c9a0b25cddcecdf9d46ba9114ea1321975ec67812746e64018cc6263a7ced
MD5 38ea30df6ad5c4e75b1a7deb2027824f
SHA1 b23ef22f0ec09a5067479b0ded2e7b8576b35c5b
SHA512 6ebedbced98f513a0eac1d1fcddcf3ecd79f2e549650abc662686e64b54233d414efa82d55c76357013a8e90f55206f2df4a8d882fe9922a575d971dc83fd131
SSDEEP 1536:lmx0o5yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bIJ:aHXqfd7NtZL8cHQRZEQ6SpsJ
TLSH
T16FC30237ABC61E339EC2CB70B9130ED797B544A9D034D301AA6D2BEB6C83495698249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 f8ef68a3500571772e95358a24e90ef2e1a495732bc4b5d5e4a5e94f630de34a
MD5 e8747151ba9d46224162d4fb000bce12
SHA1 22b3ec55443bf7107cf125d46b318a3303e017cc
SHA512 1768c9086c9d26ff756779951562c739e991c5f271b51bbbc6f5f03fc5eca3fdcfecfff9295ec6754394c422751d7747cdca3a809ed2cb0afbd144f7a0a4e297
SSDEEP 1536:T/QyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:2qfd7NtZL8cHQRZEQ6Spsk
TLSH
T16EC30237EBC21F339D96CB60B9530FD697B644A99034D301EA6D77AF6C83891684289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 3c438cdf177cf12e8ce8a7691dc5404690910722698de5e1f7812868d4916599
MD5 f98f4957065d3aa4aafe74107714c8c9
SHA1 2c2e2415cbe519f7eefdbf284e4f1f2c6690c0f4
SHA512 eac63bb697bcd6977f9030c117a7cdab695ab773b3fc0ec3a214a33af4f602da23eae6007579754f18b2d39aaafecc358dee5563d6c2092952507d0aba3b270b
SSDEEP 6144:WHxnHtn0lHp05ayxQQdv+m4UwqZ/ZLW3Ex1:WHxnNniEKQdwUwqZ/piQ1
TLSH
T1D33422332AE31E37DFC6C2647E570D5D6E711E6B9471C240AAA83BEB6902AD11C074E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 085c0618f80b5e8cd72c1691df87a23597399b4e2c7aba3c9ee769f036605ecb
MD5 d94ff0a18767fd9ade867051df8f5a8a
SHA1 bb47c343b865aad3ed771c44c65e1d7d9457663b
SHA512 6fc8e87d5f64f30509a78e476054d31b6dc4677e5cea81dd2c113dda08206fa06f353eaaebca56b1a19e5d76cd9cca1cc3c84cc4f8ee77d48ef038b7041b0441
SSDEEP 6144:/TnHtn0lHp05ayxQQdv+m4UwqZ/ZLW3Ex1:7nNniEKQdwUwqZ/piQ1
TLSH
T10A3422336EE31E33DEC6C6287E171D1D5EB11F6BD830C144BAA83B9BA9069915C074E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

118_Kz_Hack_v.2.rar.crdownload

Path C:\Users\Admin\Downloads\118_Kz_Hack_v.2.rar.crdownload
Size 59KB
SHA256 a64badf978caef5b8caf7c390c417fafd0be0472dbc0027f35d54a9da5014548
MD5 f08e9b975ef8164f6b38630d5147f588
SHA1 d09183fca374ead5b4862772feb4c61df5f4b24b
SHA512 ad79327f69e949c325c86ae9d28c3074b8a9e1a6a075df3a44968fe92bc651f17c1d8da90d68ce9b9cbd90b414b34d8fda54479a1024e7e931b073800e2025e8
SSDEEP 1536:T2tiC2tiR8R0MP+sbBkOk/KuhSnABDGVQ+bKn4:OiNiRstrwKGAABDE1bKn4
TLSH
T1445302B8E209275CC043867E10FC4AB9E69C1F78D9E12E19A57826DEB76D735460CB3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download