hxxp://nguoivietboston[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://nguoivietboston.com
Sample260730-dahhfaaf95

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3920	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298533079484718"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
5784	chrome.exe
5784	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe
Token: SeShutdownPrivilege	4108	chrome.exe
Token: SeCreatePagefilePrivilege	4108	chrome.exe

Suspicious use of FindShellTrayWindow 44 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe
4108	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4108	chrome.exe
4108	chrome.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 4108 wrote to memory of 6080	4108	chrome.exe	89
PID 4108 wrote to memory of 108	4108	chrome.exe	90
PID 4108 wrote to memory of 108	4108	chrome.exe	90
PID 4108 wrote to memory of 3920	4108	chrome.exe	91
PID 4108 wrote to memory of 2180	4108	chrome.exe	92
PID 4108 wrote to memory of 2180	4108	chrome.exe	92
PID 4108 wrote to memory of 5000	4108	chrome.exe	95
PID 4108 wrote to memory of 2780	4108	chrome.exe	96
PID 4108 wrote to memory of 5000	4108	chrome.exe	95
PID 4108 wrote to memory of 2780	4108	chrome.exe	96
PID 4108 wrote to memory of 1720	4108	chrome.exe	97
PID 4108 wrote to memory of 3228	4108	chrome.exe	98
PID 4108 wrote to memory of 3228	4108	chrome.exe	98
PID 4108 wrote to memory of 3692	4108	chrome.exe	99
PID 4108 wrote to memory of 3692	4108	chrome.exe	99
PID 4108 wrote to memory of 1748	4108	chrome.exe	100
PID 4108 wrote to memory of 1748	4108	chrome.exe	100
PID 4108 wrote to memory of 668	4108	chrome.exe	103
PID 4108 wrote to memory of 668	4108	chrome.exe	103
PID 4108 wrote to memory of 3256	4108	chrome.exe	104
PID 4108 wrote to memory of 3256	4108	chrome.exe	104
PID 4108 wrote to memory of 4556	4108	chrome.exe	105
PID 4108 wrote to memory of 4556	4108	chrome.exe	105
PID 4108 wrote to memory of 2904	4108	chrome.exe	106
PID 4108 wrote to memory of 2904	4108	chrome.exe	106
PID 4108 wrote to memory of 5192	4108	chrome.exe	107
PID 4108 wrote to memory of 5192	4108	chrome.exe	107
PID 4108 wrote to memory of 204	4108	chrome.exe	108
PID 4108 wrote to memory of 2260	4108	chrome.exe	109
PID 4108 wrote to memory of 204	4108	chrome.exe	108
PID 4108 wrote to memory of 2260	4108	chrome.exe	109
PID 4108 wrote to memory of 3192	4108	chrome.exe	110
PID 4108 wrote to memory of 3192	4108	chrome.exe	110
PID 4108 wrote to memory of 4972	4108	chrome.exe	111
PID 4108 wrote to memory of 4972	4108	chrome.exe	111
PID 4108 wrote to memory of 3788	4108	chrome.exe	113
PID 4108 wrote to memory of 3304	4108	chrome.exe	114
PID 4108 wrote to memory of 2284	4108	chrome.exe	115
PID 4108 wrote to memory of 2788	4108	chrome.exe	116
PID 4108 wrote to memory of 2788	4108	chrome.exe	116
PID 4108 wrote to memory of 5132	4108	chrome.exe	117
PID 4108 wrote to memory of 5132	4108	chrome.exe	117
PID 4108 wrote to memory of 2504	4108	chrome.exe	118
PID 4108 wrote to memory of 2504	4108	chrome.exe	118
PID 4108 wrote to memory of 3556	4108	chrome.exe	119
PID 4108 wrote to memory of 3556	4108	chrome.exe	119
PID 4108 wrote to memory of 3132	4108	chrome.exe	120
PID 4108 wrote to memory of 3132	4108	chrome.exe	120
PID 4108 wrote to memory of 5468	4108	chrome.exe	121
PID 4108 wrote to memory of 5468	4108	chrome.exe	121
PID 4108 wrote to memory of 3152	4108	chrome.exe	122
PID 4108 wrote to memory of 3152	4108	chrome.exe	122
PID 4108 wrote to memory of 5932	4108	chrome.exe	123
PID 4108 wrote to memory of 5932	4108	chrome.exe	123
PID 4108 wrote to memory of 4896	4108	chrome.exe	124
PID 4108 wrote to memory of 4896	4108	chrome.exe	124
PID 4108 wrote to memory of 6024	4108	chrome.exe	125
PID 4108 wrote to memory of 6024	4108	chrome.exe	125
PID 4108 wrote to memory of 1760	4108	chrome.exe	126
PID 4108 wrote to memory of 1760	4108	chrome.exe	126
PID 4108 wrote to memory of 5784	4108	chrome.exe	127
PID 4108 wrote to memory of 1472	4108	chrome.exe	128
PID 4108 wrote to memory of 1472	4108	chrome.exe	128

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://nguoivietboston.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffa532ec728,0x7ffa532ec734,0x7ffa532ec740
  2⤵
  PID:6080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,12661732147542254823,8178296852504173637,262144 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1468,i,11120419717201567323,13489893898705190864,524288 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2296,i,5009417284488588010,483208465902196826,524288 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:13
  2⤵
  PID:2180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3112,i,17978426959827857655,4438859216972712063,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3120,i,1409167061342537584,2611919752664675217,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5168,i,17974966886032128304,6663544366077162350,524288 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:14
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5300,i,6663074796560331119,8272168104027323355,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5320,i,18256128938157932072,2673876980889534622,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:3692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5604,i,6566228070800379905,11375783087688947783,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5600,i,7147987814353581261,12092536492203899592,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5400,i,13266399341625958716,5892717530042448061,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5348,i,1639947631185632467,331673268227480303,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5320,i,5422491882105615682,12606486137369773149,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5592,i,13552955872309233982,4911686160710502574,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5668,i,18127596245569109849,8962348864559528629,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5240,i,1514802598973982839,4030679793669355288,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5768,i,6070404247222993170,18389962804126475226,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3280,i,2542042066366400868,15298083487854878298,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5292,i,5678842643161197344,11288611608505055354,524288 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:3788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=256,i,3514664839620297583,11487737618219158800,524288 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,15837347691402541747,1505506915982062689,524288 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:2284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5456,i,1077304511505102086,7490719020196657705,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=3328,i,32250425521681699,11358455443123806930,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5460,i,4405528663689803435,6134554533267233331,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3132,i,9738459636796778721,7033835024792010330,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5480,i,15666393813008134236,1820702743264759178,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6116,i,9003766933215748775,17032286565581546617,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3148,i,16177014122251816477,596165669300227882,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5556,i,7073173263987956884,9559429390286028931,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=3320,i,3415615798306805829,13674587152236478324,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=3128,i,1845293100503059513,6140245448975487421,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=256,i,3224177737902288144,13664584071928684450,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5664,i,8124784870837592926,2447856483492359267,262144 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=5964,i,6548798624109616000,4270856729548183970,2097152 --field-trial-handle=1908,i,6477829879783521823,12042356405159750363,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:1472

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2844

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:804

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:2400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 744B
SHA256 859ac2872cc5f15017d769acfe55d2f64479fe0086a4dd2243d210a9feb98fc7
MD5 7a329cc9dca9194cdd246d394653eed7
SHA1 ada2aab456a4c2dfa45e490c6aa30318c9a05143
SHA512 696707191815c6658ddeebf82270fdc7811fb5034cef512685ea2b28df4ba1d7506ce13fa6762a7d53d256c4b3ce59e5c978a2c6fd037d2bcc65f0bb054bdb0b
TLSH
T10401504D534F83D5FFF41C7134F27F1424A949B96503538A66F0D9D87A93F715082A06
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 82362f22547c5b1dc4c5ba625667281b2919152fd3516b8663dd76bb538d4797
MD5 4caab07afa91e32afdfc452de781dd64
SHA1 c94d36d2adae9917cfdf4a562d5c3e0a2451c9b7
SHA512 1bf14087d8e5371ce4264a9db0ab2b6e7217e27219381222d7d712de99a258c8f4e9fa621a89229773409136eb10edd1c50f6aa490aaab6f052e742e2d38eb63
SSDEEP 192:DOCOhyy/dlJPJlSrJZeW3i1byxvJthaP5vnfPMNP0Nl9v:DOCOhyy/dlJPJsrJZeW36byxvJthahfV
TLSH
T105E19BF7C3D8962DC84156F4DB256F2FCE2D0A18432D3C26C8D9AE5B93E2872D21525E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6f4159ff35080cd38e9d79375e8cff7fa1564847b4bf92425775be1e1b75d2cb
MD5 d095e51e10eb96e33bd9ce887da37937
SHA1 2adb64b9178d30bb12c74307d4ff5389bb8dfbcc
SHA512 a818019ce89dfd3e074527e9c2763f9a825f49e12c488bcc9b7c7e294378551204c9dee8081776fab5c835a768b0eb106f4d3d74dc28ae7cd2645dbe50d18bf2
SSDEEP 192:DFCOhyy/QSrJZeW3i1OpyxvJt0uaP5vnfPMNPl:DFCOhyy/3rJZeW36OpyxvJt0uahff0Nd
TLSH
T132D18AF7C3D8952DC94156F4E7216F2FCE290A18432D3D26C8D8AE5B93E2872D21525E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 40ef96a5929c23796b9e9968e214f170300362de65033a9665d46dc86ee1494f
MD5 56769e1f74382d437e12f3c04e5d5207
SHA1 8bb8c121b5ad30f3d03db04443843841984cac13
SHA512 bc10854ac8775a62a877173b9be3403fc8b7ea6cd6ef127df1081a3db0bb7481f740e2f8f293a1fc62c4b54dcb84894a523414908938b40340a26131a6bb68a9
SSDEEP 192:DRDUavgKv7QvAPRp2o9XxHKO7b+WNnGwP/XE2iE7YkwbVyIsnAUgR:DRDU9G86Xjfz1P/02G9R
TLSH
T1E732972EBE14693BADCBC22EFA657793D7F6102161D02E44E6FC8A2C15D75CC222700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e77f140849078a9641c9325f51996777e0d1ba07af8e0637fed10a595aa60908
MD5 a7393d5caab876ff166e5d0182362e79
SHA1 275354397a607288d8632469d573bc500094a7dd
SHA512 0e52806787e56c818430358a8417f2004d0f06be452749e408db9fe9251735315bc1c41fffe931d6a6483302a40282053162604e69bf0ffb8c63654497620809
SSDEEP 192:DRjcBzUavRq0v7pVPRpktZ2M9XxHKKb+WNnyK47bePE2iE7YkwKVyIsnAUgE:DRjmzUaR3XwfDfYes2GqE
TLSH
T1F142A72FBE106A7B6DCAC229F9557B57D7F61021A5D02E84F6FC8A2C15EB6CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6dc008c92e9e6f7951fbab49dcfef6d70ad3b2961755c862846b9539d8c9a53d
MD5 071024e3b68bb218ac393bf98b309b86
SHA1 027456434c88ccfb86319bb2607eac2f086e1784
SHA512 32e753996742ba9d81f89e6c343e22fa0199abaca3eedb91a67376ad3594d364644711834be7844720fd0127425561ea8655f31573db16b6ab03636aa75e2cc1
SSDEEP 192:DRfUavRFv7pAPRp2t/il9XxHKm7b+WNnyK4Db2eE2iE7YkwQVyIsnAUgE:DRfUa1AX5fbfI2/2G0E
TLSH
T1E642972FBE106A7B6DCAC229FA657B57D7F6102161D12E84F6FC8A2C11DB6CC6217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2f070b99f67fa6b01f138b1504812f118129fa40e201b90a29f698c0103895ba
MD5 28d6685b1ea313aa5765a94162da9dbd
SHA1 61c79c0c5e4bf3a6c31244a465f73e28b4335f85
SHA512 84ee05e14c3792c9cfbccbe077f2d0b861cf921989065dc859675323a6db3426b15599778b2b4003b4ba4a5504140405a726e0a2dfd05a4f372eda0393688c15
SSDEEP 192:DRjcBzUavRFv7pAPRp2tZkM9XxHKW7b+WNnyK47bemE2iE7YkwQVyIsnAUgE:DRjmzUa1AXUfbfYen2G0E
TLSH
T1A542972FBE106A7B6DCAC229FA557B57D7F61021A1D02E84F6FC8A2C11DB5CC6217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0219b81ec1ac9f345b3dd717ec29c32db8747cccc2f5424b8717b100d7310097
MD5 8c5780ccee845a707253abe30b4d02f0
SHA1 317a5ba4e17566f128f3355a5dfd127afd50c606
SHA512 b1cab8080311add1c203ec4798b694b9ef2b974c7c94a9e5a30d01dc303c5e39ed955966f82b432308ee8da3579da871911fbb934f755aacef0d482f4c1a1a7c
SSDEEP 192:DRjcBzUavRFv7pVPRpktZkM9XxHKW7b+WNnyK47bePE2iE7YkwKVyIsnAUgE:DRjmzUa13X2fbfYes2GqE
TLSH
T10342A72FBE106A7B6DCAC229FA557B57D7F61021A1D02E84F6FC8A2C15DB6CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 451e83238f8332256d26238ded307340cfe634da1b3f33853590ffb1489a4a16
MD5 48d8fbba1ed63aacf8092331badda594
SHA1 00415f78a5685dc693330747b272c063c7ed40c6
SHA512 8660a86b2058c9b3c07307e5179dabd768ad768c1ed1815a85900622cb35be0d8b0235310543684a161246d231c431e7c48f64ae2a3d73088d63a91d116a8ef5
SSDEEP 192:DRjcBzUaviq0v7pVPRpktZOM9XxHKqb+WNnyK47bePE2iE7YkwKVyIsnAUgE:DRjmzUJR3XkfrfYes2GqE
TLSH
T13142A72FBE106A7B6DCAC629F9557B57D7F61021A1D02E84F6FC8A2C15EB6CC2217007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 04657b3e909b0a58566bb35752f5b8735844b16f77c1ec2ef73c9a1aa09b4bc3
MD5 60704bf71874b5cc430847907e1f9c08
SHA1 34ccc402118376b433843063de256601fa7e9659
SHA512 74007107a5d5c1d42343a8d5101e744fd8f5d5a389c2a04f3526b19ae4018776fd2aee82ec122fa1a423951a2b6a7feeecc1a7dbd6fe8796de83a8f5ada49f18
SSDEEP 192:DRDUavgFv7pAPRp2o9XxHKO7b+WNnyK0PE2iE7YkwbVyIsnAUge:DRDU91AXjfzf0s2G9e
TLSH
T17932972EBE14693BADCBC22DFA657793D7F6102561942E44E6FC8A2C15DB5CC222700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 76fe48280c9c2fce8e68fb3be58b6bf737397e6514bd34818e4d0d2d2792a427
MD5 4d18525b7cf84b616e083d17216b9229
SHA1 f93bf712ce9ec813e48724ea93318791a2bc30a0
SHA512 402206ab6115a1c928f1a32d0e99be2561d22fd1b240b0a9f284570c86b08bd1d1e95e073497ae7ff9a960ba586754130983af852c2602b1741e12a4dcf00109
SSDEEP 192:DRDUavRFv7pAPRp2Fk9XxHKm7b+WNnyK0nE2iE7YkwQVyIsnAUgE:DRDUa1AXTfbf0E2G0E
TLSH
T15342972EBE14697BADCBD22DFA567B93D7F6102161D02E44E6FC8A2C15DB5CC221700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 85e93e7c7421935f0911b856282522aa7697c7f7f3e4e91fe9b68bdb1dee2254
MD5 17b14bf97159ca9e7782c9d7e031bfcd
SHA1 5412ddbb770ca1e448ec81ffd24d22720b4873e0
SHA512 fa87b1df3588a9d8536d2ca0322b2c03b19cf27561fcd164ff9c5ff208fc0e27dc790a5315f566f02886adf9352dd827c1148a40ca6a9d5dc8c58be7d73dfc76
SSDEEP 192:e294K6vX7KxkXqK4I40pUZNCgVLHrKHfFKslEClTXzKD/cb+ErUkKN9G6jBTK8/T:/9j0X7KxkXqKf/pUZNCgVLH2HfgslNT+
TLSH
T1B332D827A48D9A3F4FD8D519DC036F8B6DF5019272780C24A7FF5D0403A978E115A2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 032295d6c3f04710e8a73bf3e5d911c3e0e0a0ea98fd4cdfa11e34914383a9ab
MD5 dd8ae67b1633bf181235d64c78875c0f
SHA1 7cf3471aba35b0b36dffae5635412e0bf54920bd
SHA512 4e39aff669c64872b36ac7edb83b3d53ba988c00002b955727f841eeb0e8d021fb887eecf8384e98c66edf25171697efa588c2aad5449680827dbb7c7b54b876
SSDEEP 96:xC0d+r2io+TJ/E0f6m934zM4RDotok58mDsB6nGyvn0b4T86iybJv4a:xC0ITo+TQ0InDUDrgPPb4T8lybl
TLSH
T185A1F835A0284DB74466D486F1626A43CEB9706BE972AF90EAD90E0D14F70EC2341A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 a6b00f56c65b85f74ffe346d496a63170a4f905f4d7e8781bd448ae74d092b64
MD5 f2c00fcb89a265a043ff9b3645df1c7c
SHA1 fbfb2bee1e7b9c6f13c8bac7e88a4f22a2bcb167
SHA512 70a9d99cd11d3a1572a5f65e0dee85b03862e4d578fecec76c05a42d56e85dcb4d1b07c0aec5f2d9cf53123ed238d28728c76407769bfc9035b7df6e5c0f73a5
SSDEEP 96:RbJ0d+r2io+TJ/E0f6m934yGMiSl8h4otop584DsB6bpGXvn0Sl0hlm+96ivRNCo:Rt0ITo+TQ0ILiU2dg2UcSKhlm+9lvuCR
TLSH
T19FC1F875E02C4CAB48F6B886B1132D47CDA8606BED65BE64FEE90F0D01E65DC6392523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 2e70f3a69950dbd609a9d94454ee4dfd8f145ebfc34ad25489d20f349dc0aaab
MD5 9dec4d221f21e28c4e248dbd31329d11
SHA1 068f8a3f3a4526c3bd7f7671113e07244a604125
SHA512 9d9f54be6c86cb9ea2fbd7a39e5946b190c9fe971ad5b357107dd236ddee37143b1dcc465e1ae1549f2fb1bfc79251edc40a4e4d03fa4e064287abb080ad60a8
SSDEEP 96:RC0d+r2io+TJ/E0f6m934yGMiSl8h4otop58vDsB6bJGGfvn0SvQxwzQlhjm+96D:RC0ITo+TQ0ILiU2sg2Jv0SIxZhjm+9lm
TLSH
T1EDC11876E46D4CB755E7A446F1222A47CEB4206BDA51BF60EADA0F0D01F70EC2392923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 66522797bcbf3a4cd0a04b40b7a25db9f1d8715ab9c07acbde45b443250b5473
MD5 b577815d4889c0c608f7d289247ad077
SHA1 8ce5415695d29ac48ae1896fdc052c7e7930c6aa
SHA512 2902031297864c962349619e8ebd6926be0cc1f376bc2270a5fe7ebee9d80ef1f64f4b75e9c78a72b21f59d533431ba6cb9f7bc8fbee5209a334494728aebe66
SSDEEP 96:RbJ0d+r2io+TJ/E0f6m934yGMiSl8h4otop584DsB6bpGXvn0SvQxwzQlhjm+96D:Rt0ITo+TQ0ILiU2dg2UcSIxZhjm+9lNo
TLSH
T130C11976A46D4CB745E7A446F1222A47CDB4206BDA51AF60EAD90F0D01F70EC2392523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 f81692137ecf512bef28ddf6b3c3605224c6b02f9a7785f8b792528c95fe5307
MD5 fe5ef29eb923a4de61620083cca636b9
SHA1 a04a5816fe9fd6bf0b1597a9281d959b8ed59a34
SHA512 93f4aa5211955696cd9c4965450dc0d2c14f6a0bbc6b78f615f58aad579e5e3611afaf4e75d93279860dcc6e0264587b1308a1b88eaaf174974993d267ffc453
SSDEEP 96:RC0d+r2io+TJ/E0f6m934yGMiSl8h4otop584DsB6bpGXvn0SvQxwzQlhjm+96im:RC0ITo+TQ0ILiU2dg2UcSIxZhjm+9lNo
TLSH
T1E7C11976E46D4CB755E7A446F1222E47CDB4206BDA51BF60EADA0F0D01F70EC2392523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download