hxxps://entresdias[.]com/prvx378hd3878793

Analysis

user interaction
yes
max time kernel
184s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 23:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://entresdias.com/prvx378hd3878793
Sample260730-2zwncssscs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3276	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299261178204666"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
4040	chrome.exe
4040	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe
Token: SeShutdownPrivilege	3820	chrome.exe
Token: SeCreatePagefilePrivilege	3820	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe
3820	chrome.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3820 wrote to memory of 4284	3820	chrome.exe	86
PID 3820 wrote to memory of 5628	3820	chrome.exe	87
PID 3820 wrote to memory of 5628	3820	chrome.exe	87
PID 3820 wrote to memory of 3276	3820	chrome.exe	88
PID 3820 wrote to memory of 1872	3820	chrome.exe	89
PID 3820 wrote to memory of 1872	3820	chrome.exe	89
PID 3820 wrote to memory of 1796	3820	chrome.exe	90
PID 3820 wrote to memory of 788	3820	chrome.exe	91
PID 3820 wrote to memory of 1796	3820	chrome.exe	90
PID 3820 wrote to memory of 788	3820	chrome.exe	91
PID 3820 wrote to memory of 5624	3820	chrome.exe	93
PID 3820 wrote to memory of 5624	3820	chrome.exe	93
PID 3820 wrote to memory of 3712	3820	chrome.exe	94
PID 3820 wrote to memory of 4064	3820	chrome.exe	98
PID 3820 wrote to memory of 4064	3820	chrome.exe	98
PID 3820 wrote to memory of 1732	3820	chrome.exe	99
PID 3820 wrote to memory of 1732	3820	chrome.exe	99
PID 3820 wrote to memory of 3644	3820	chrome.exe	101
PID 3820 wrote to memory of 5832	3820	chrome.exe	102
PID 3820 wrote to memory of 2552	3820	chrome.exe	103
PID 3820 wrote to memory of 3232	3820	chrome.exe	104
PID 3820 wrote to memory of 3232	3820	chrome.exe	104
PID 3820 wrote to memory of 4696	3820	chrome.exe	105
PID 3820 wrote to memory of 4696	3820	chrome.exe	105
PID 3820 wrote to memory of 2564	3820	chrome.exe	106
PID 3820 wrote to memory of 2564	3820	chrome.exe	106
PID 3820 wrote to memory of 4452	3820	chrome.exe	107
PID 3820 wrote to memory of 4452	3820	chrome.exe	107
PID 3820 wrote to memory of 5532	3820	chrome.exe	108
PID 3820 wrote to memory of 5532	3820	chrome.exe	108
PID 3820 wrote to memory of 3492	3820	chrome.exe	109
PID 3820 wrote to memory of 3492	3820	chrome.exe	109
PID 3820 wrote to memory of 4040	3820	chrome.exe	114
PID 3820 wrote to memory of 2552	3820	chrome.exe	117
PID 3820 wrote to memory of 2552	3820	chrome.exe	117
PID 3820 wrote to memory of 5760	3820	chrome.exe	118
PID 3820 wrote to memory of 5760	3820	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://entresdias.com/prvx378hd3878793
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffb3fb2c728,0x7ffb3fb2c734,0x7ffb3fb2c740
  2⤵
  PID:4284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1652,i,15323831857998084602,12399656424215797578,262144 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,11742002126648718112,11519892792736155244,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3276
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,6607311398258016972,7442938958192811454,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3192,i,12619528082968142872,5197613680390251777,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3196,i,6386462201818097114,9485403771907104924,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3924,i,287122235858987252,5690298632801069656,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4432 /prefetch:2
  2⤵
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,2105825513592301745,4576314499881129467,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5692,i,5063640056378946023,7880250407184833495,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5640,i,11184745663167762216,1141496657339895232,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,12652350326826939372,12313166037293410177,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3220,i,7926912696650067298,15928273866481904541,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5896,i,2160443531052021363,17724423925943592428,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4652,i,3809650810249151946,11263998926369324449,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6040,i,11927696674937755292,4214042847751465576,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4484,i,13142575689805332671,4591447389603723275,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5700,i,800594796098943780,2947374354727499929,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4528,i,1025118776066953535,2669630566218745926,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4548,i,12606399297107325638,10689259987767194229,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5828,i,9152449640665284841,6527853052652711812,262144 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5880,i,13044617554174826970,10114337564411912802,2097152 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3396,i,17516411956516457287,4203796020538543269,524288 --field-trial-handle=1980,i,18052669711260237231,2421723520983031216,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:5760

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 8c8bd53c63519eb209d2e23911878c6d4f63e2d9a33ed85c174f6b149dcf32dc
MD5 336d63d67b7d6c5652db54f5ce085bd5
SHA1 7549a32e26b74e4b27192f1a1c05863135f897d6
SHA512 0d892d63cc20143fc2573181087e5f2f4ad8249599be286ce98655e7ea566b2333301285b210c91cd36921a4e6d20916a23cc6a80a0b72bee4c86e95af8fcae0
TLSH
T1E9E02BAAC932AD2B09FD072924580786E75423172B40456F3A3C920D8FB8637098AC1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 90KB
SHA256 834d3fd72d80f94c8adad236790aae41a084b80a8eeba517826afddf63b945e4
MD5 8cc3a9334b5ecd4b165198eb206f95fc
SHA1 06372a1bfa3bfca58ef28be2e067f2c940781dd8
SHA512 8e4dff086194b807fcc0b9af5d1184d94ff6e85f44fcc6e66a245ea6d12785939b9c3c4fcf77a97c0eb0beefe51b57486051df0148170f7836d4d0190091d6f6
SSDEEP 1536:g7EL1B3ZIVCyv6IYJx+3VxzkV6SDHSqMPixkeUn23lnm8csNJnTIK2sAQZ/2HcM:w41TIVCyv6RJxmV9g6BgxkeU2tJcIJnA
TLSH
T15F930296AFC44AED3013D7E7095C083E3F72C7D1215CA58466981DFB981EAD71D2BB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 fea8d5f79d493831330ed912ac53d6be756e2f32a6962369d5600c7a258abedd
MD5 df04f5903bd6a79d74e58de061bc7db6
SHA1 d30c73f4453a3648dbd6c6d5241fe3161397c674
SHA512 f67d5e58ab1ccf74e64e6460d877b0f77598f112cb38f2eafb2402e2e9cc57ec2220dc211ea92573997039587b182f54728874983308ec52f6adb6687551e9c0
TLSH
T18EB0121061C11F4FCBA8C6F0238326C322300D800042B78385F040C7A4536E55527040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 0fdccc6ba309c72761fa82bf5bda3db209486fc72e456333792740aa145806e5
MD5 bb5682341db77ba2581f94167eceb81c
SHA1 d50ca00340dd942dae522ac924d0bd426ec21009
SHA512 c61d5d0503717defa2237fa0a91fd75fe87ed33f8d761d59d72abaf795135f2abfe56cb6c6534b83a5a40d630608f845e475e878c15c3dd3cf49dcf16a3f0a9b
TLSH
T1F8C02B1864C02089C78CD5B1029303451A3080C48013FBD38CE100CA88353F142070C0
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 cbc1823b720711b3a1544822055d01292cf03f9fd0cc0bac4f2ac9a69b4b4663
MD5 c02aa4ccefbf6a8512e8a645c5ba8850
SHA1 741608d0485ed97b8d33e105739d9ea2effefd32
SHA512 6cc4127d2629aa28f49db51ee01a57b340db4a1d2e5ce765c91e843d504c6ffc0e051bae48d1cacc3b76c5189875fc9909f373bb06f0b743a0d70cfd6ea63f8f
SSDEEP 48:YALlhbzQPzYPzEzhPzYaXYfo7EdKsX4sGgmzs5+s2cgWzssbizsE+s5DsoOzsmRI:D1s8IlsaIaEdpGyEH4bcT1KCN
TLSH
T1C1A17CF3D3F8C63EC91152F4A7152E1BCD290524563D3C6A88D5EE9BA3F24B2E24464E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b03f1e2d62a6a2e73c7e239329f7d0da9d06b322906cba07546a621307778fa5
MD5 c92a4b304e4312b0f8b425488e3ad1e8
SHA1 8da21b93b915c92ab60d1f3b964048f0a857cc78
SHA512 af51703232873a55289f079bc20cf98f4d51f343c3ab513031dc8c2858dca4bd76f71af1ee1483932d8ebf741ff084aafad05f9358da5c25f36eac54817757b4
TLSH
T1ED418DF793B4957E8A1192F4EA156E1FCE690524132C7CA689D4AE1B43F28B3E10078F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 87b6c07f8783feb722c1c848faa16c29bcb270ece3e6a4240e4700e537bf33a8
MD5 475076487f5df19e5fe9e6d44147eba6
SHA1 1b0736efeed3955fbee73d397c7a7f91525e3a6c
SHA512 e0d3475ca29570049c1664ff377320ad2e4cfe8907d0636b9db57bfc13a74e4ecfe965609590231813929ffdca7a3a643abf4a9b7a1d2146b22bc92aee276d27
SSDEEP 192:wRUYf9+P9F23w4Pqv72ymp0PRpuh6fC95Hsb+WNnYyfyZ8HLHkwCVyIsnAUgGBX:wRUYf9+Fw3tmQwX+7w/c8rHiwX
TLSH
T15A52C56FE910157B9CDBD22AF9127B53E7F5102226901E84EAFC8B1C15EB5CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c6d15806e0b152bf582f5d8db8ddc5bb5c42d82f6a92c408f973572943ad22a6
MD5 4f1ea7e5df0fa0365b71dd0eb1c85b7d
SHA1 bf68a9380e4f3f7e07a7463bfe8fa3df9685f260
SHA512 0fbd1b266628d7d558180d633f6853687e960bb03be5c1f393fa582363492edf873b6f2f54bfd5f9c48ff6a465c3690545a186d8561d68554e4665c055f586db
SSDEEP 192:wRUEf9+P9F23w4FHv72ympAPRp2h6sR95Hsb+WNnYyfnlkWLHkwIVyIsnAUgE:wRUEf9+Fw3nPQUXQ7w/dkAHME
TLSH
T17352B56FE91069779CDBD22AF9227B53E7F5102636801E84EAFC8A1C15EB5CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 70be22b2669aece5077672854ca6616c819fc30c367d7d10ccdb264f7a062637
MD5 b55f99cd18cfecdbc3139a81fce8dbfa
SHA1 cfeb2303075d42a31300c15f534cbff3c182bf31
SHA512 4ef1d5c7b324a61205bec60ea7cfac5f3e9778f7c25410dad1811d752e84b73b6f15d0eaee4bf0868a2596129264abbbc17dfe2be8c0bbbac76686e4e0bf8a28
SSDEEP 192:wRUpf9+P9F23w4zHv72ympAPRp2h6xk95Hsb+WNnYyfRfEPLHkw7VyIsnAUge:wRUpf9+Fw31PQUXK7w/pEjHde
TLSH
T1FD42D52FE910657B9CDBD22AF9267753E7F5102635801E84EAFC8A1C15EB5CC321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 385dcd3f0af6a0f6498e8cb8c30868e934818191c936bba63898d33121fce65b
MD5 7d24d3e1d9964f53e2bf03706f2cf3da
SHA1 3ee8ed43bb3e76aa2ac7ff909ef8ad338c9bc881
SHA512 772579167e391256a9c13a3355819d29d43be51ffd2013f8cb4ff858f39552f4450c2c9e7be0459f04e9cba93561d9ff17c86bdf0a38eeae9b16c0218906774f
SSDEEP 192:wRUYf9+P9F23w4Pav72ymp0PRpuh6fC95Hsb+WNnYyfkYUxLHkwCVyIsnAUgGuX:wRUYf9+Fw3t2QwX+7w/nUdHiXX
TLSH
T14652C46FE910257B9CDBD22AF9127B53E7F5106226901E84EAFC8B1C15EB5CC321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 f62bd59dfc49d992a832f7ad477db61791bc86570d7d372b6cfb1d1999878f31
MD5 9e43ca9fdb2ebadcbf5b8c7eb3416fc1
SHA1 1c4f60c05045e41269c5944d6b1cddfa3e5fb14e
SHA512 f8e22734fc9d1003735973c47881ad13cb0c33bf4691e5e734f7a0100d4edf5a54048ec39a3265ce4ea163065261bf52d4b1799d80ec5ade9f3cc1bed9a9e7ec
SSDEEP 192:wRUpf9+P9F23w4zmv72ympAPRp2h6Y95Hsb+WNnYyfl72TLHkw7VyIsnAUge:wRUpf9+Fw31SQUX07w/R23Hde
TLSH
T12942D56EE910297B9CDBD22AF9267753E7F5102635801E84EAFC8B1C15EB5CC321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 98eeeada965f64c193580bbde4ddc71e7dcd8181a7d9e2d1a3eb4522abeb0bcc
MD5 1216b71a53c811f1d341edd640f3c3e7
SHA1 b4e0a51483e91bd883d8aa00d2eb4360d851065e
SHA512 512161205cdb373b1702e454f3b6626c5b79a2fd69755657b3d3c8772f135c4706baac702f984af6bdf2781251b2d527b86f10b92fb3fcf0da351ffc4ad3f37e
SSDEEP 192:wRUEf9+P9F23w4SHv72ymp0PRpuh6dC95Hsb+WNnYyfZm22zdLHkwCVyIsnAUgE:wRUEf9+Fw3APQwX07w/N2FHiE
TLSH
T11E52C56FE910197B9CDBD22AF9227B53E7F5102226901E84EAFC8B1C15EB5CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f8f6ec03e8bcaa645ca1becc25ae07e40b87a81c7bec4c23880aaccba8a6a334
MD5 b03f072f6f7fe7491e73ed2562ea0b45
SHA1 a0714ba41ad13639685191769667f58823fba412
SHA512 4e7d4a913370ba4f5278286e3e97186ba7512e5fc1f97639070580ad6bedb91dd65dbac59f121a2ca4091dbcbadf15f4c5dbca6404fd6cb7c97824d2027e4e69
SSDEEP 192:wRUEf9+P9F23w4PHv72ymp0PRpuh6f2C95Hsb+WNnYyffo0cxnLHkwCVyIsnAUgE:wRUEf9+Fw3tPQwXDx7w/HXcxLHiE
TLSH
T19952C56FE910197B9CDBD22AF9267B53E7F1102226901E84EAFC8B1C15EB5CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 50c870c93476bdfa1a63440f2ee5ba9532b750f7702facd68e92120dd57741e5
MD5 4d8e98f288b5f28a5a592ef69e75bc95
SHA1 a2d2155ee3ddda35b9733c3ce5388016fecdaca3
SHA512 44301c7976788ad440c54d76a0b41b44ebb6a72f9d8e65a9e32515dda5c50d3e5353eeb97d1bad8d72310b5072b974a0d56b7e70487aad69c039f57782b9d88e
SSDEEP 192:wRUEf9+P9F23w4Pwgv72ymp0PRpuh6f2C95Hsb+WNnYyffo0cxnLHkwCVyIsnAU3:wRUEf9+Fw3tw8QwXDx7w/HXcxLHiE
TLSH
T1D752C56FE910157B9CDBD22AF9267B53E7F1102226901E84EAFC8B1C15EB5CC321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b44f06875e76f46a25622baf543632f8496a15b5ffa543c2be087a62b783cf8e
MD5 5ea911087d9c1480444ac1d75a19ad77
SHA1 848f1398b16ab36ed6595dde54aae6fa0c1ff00f
SHA512 236b1751b822856a510902bde702881e28846dc8354eca817e7039836e8b7425610b0514ef49d60c084bac5c99ce7c99b61d58db93d378c9322f06879e870a2c
SSDEEP 192:wRUYf9+P9F23w4Pyv72ymp0PRpuh6dC95Hsb+WNnYyfyZ8HLHkwCVyIsnAUgGBX:wRUYf9+Fw3teQwXU7w/c8rHiwX
TLSH
T13A52C46FE910157B9CDBD22AF9227B53E7F5106226901E84EAFC8B1C15EB5CC3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 055c8891c9de5e0aefa259cdadd010026a118bd07ad883e61b2093f75e13a6cf
MD5 bb8cad7380d14c6c7298899541e57173
SHA1 dae4df9d414e6ba89bc9cc0bcd4fe2c7b37ef96c
SHA512 190a55e169711912f42b518112561c4d07c482e894428b3933e462c43123bae8c02c7f74c88fcd1d23f917280bf9b293f3813fc525666167a2276f4d830b55a8
TLSH
T1E8B0121090036142C18202B012565498F1389F12A70A170163F07962CC351618118050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58534b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58534b.TMP
Size 96B
SHA256 fd83f4c767ec1c6ee90d0c6e27f1a9d8bf6a0e5659807a1c6109181201bc69a8
MD5 378ec6a656c88e0903aee661e981b779
SHA1 238dee0b6fc57298961f2dfec5678bbad8d6d117
SHA512 55a7804a4316d9c9ef5ce823c9c7f31a1e8e48f48af4542b9f9fa003747f41e203a2e53bc96bb415765870033aa3bf1d45337270db0359a821f40c82c27e7950
TLSH
T1ECB0025AD5436213C07317F03695A5D87264DF25CB0736129AF02B66DC2567146265B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a03adc5f2bb0b16ddc59633fa0eba46d584f533356ae9b37f122d0bbde472896
MD5 10dd146fcb641b3660a2b2527bda9365
SHA1 df06a9f70169d55d0da51c2da5ba4eade9ed2201
SHA512 58d00004b6867ad46d0163cc750622a7e949d745afd169b9504496a73c598b87173e5cf1f2c719392e237550e7fe52b902683a9ff7dfece6f74fd9feeb1c2229
SSDEEP 1536:W4x6yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:FIqfd7NtZL8cHQRZEQ6Spsk
TLSH
T102C30237ABC61E339ED2CB70B9130ED797F544A9D034D301AB6D6BEF6883491698249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7422259e4dafc4a1f3182d3ed9ef8c29eb203720cd026599677fe42758857729
MD5 45a970d25155b97cae84ba117e9e5086
SHA1 15b2c0e628188a945f56ff9765028772b577ef64
SHA512 bcef388307ecb5cdc979f6146eefbfdd155a40e1e7c0e830705e7a2e0d536f1143c4915ebcdb8368f59f55b3ed0189b3345be72a1b5a79e93b985fcf93406a30
SSDEEP 1536:WwZhyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:tqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1E9C30237DBC61E339DD2DF60B9130ED653F604AA9034D305EA6D7BAF6C83491A84289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 a78524e289992f48d7d0f7576c74238d490b0185c712fca23631b0e7be0dd827
MD5 78276300082f2c60fbd2f8b3bd78a699
SHA1 7a22468847edf4cf40bec5e4c7a642b5629f7ddd
SHA512 a719b38b2339affc6467f16c91df0d93cc260f28f4484874337941a35c7aeb3eeb6005b699e05a70de08ae208525c4fd03d94db5fd71bb8ee7c65acd290b5209
SSDEEP 1536:TAQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Bqfd7NtZL8cHQRZEQ6Spsk
TLSH
T11DC30237EBC21F339D96CB60B9530FD697B644A99034D301EA6D77BF6C83891684289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 abe2ffa5635ff524b76d3b7948f988a236159f1490209ece7661c10500da3b56
MD5 0345aa883de85527dc420e1d6fe48e38
SHA1 1d63062068562a4dd78858409887f05368d04a4f
SHA512 0dc663f1ad878c41c182884e9758dcfc8641fce130bcf36671e82e737b949c97f8f699d6458c8708cd4f3f3b63371844c85702a49c97d783264f04b1d6f017e9
SSDEEP 1536:14x6yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:kIqfd7NtZL8cHQRZEQ6Spsk
TLSH
T151C30237ABC61E339ED2CB70B9130ED797F544A9D034D305AA6D2BEF6883491698249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download