83e061b00e94f2a5348051ee81be8a9c7a00961da81a20245bc6b6914626e23f

Analysis

user interaction
yes
max time kernel
299s
max time network
299s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 14:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
yashapuff.jpg
Size 66KB
Sample260730-rjsawsaf57
SHA256 83e061b00e94f2a5348051ee81be8a9c7a00961da81a20245bc6b6914626e23f
MD5 f5cf55fee5e83609f194053b48aa1490
SHA1 8ed20775e41d4e309e61b85f400727cd14b01cf5
SHA512 68244cfa1173379f1db23432f07f369034911792f06abdc7a1c1ab94a1ed4c6ffe7b8e1b526f7432e888978815a2a9b5fba050163dfd20f992f4fa2f4a854bbb
SSDEEP 1536:sbndT3OR8i38LbLBaYwuQ4w6SIPbV3bR92Uu1fZ9cxz4h:wcRNeL5wuv7Ss3Pu9cxz4h
TLSH
T1DF6302CDE3839296E3A715F4325D09B2D90105228DB5BBB80DB58A3B2C4B9C5D858EDF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4616	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298944610435184"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{75D3EC7D-F442-4A7F-B795-D08C45F52036}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3200	mspaint.exe
3200	mspaint.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3348	chrome.exe
3348	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe
Token: SeShutdownPrivilege	3652	chrome.exe
Token: SeCreatePagefilePrivilege	3652	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe
3652	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3200	mspaint.exe
3200	mspaint.exe
3200	mspaint.exe
3200	mspaint.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 3652 wrote to memory of 2500	3652	chrome.exe	91
PID 3652 wrote to memory of 3680	3652	chrome.exe	92
PID 3652 wrote to memory of 3680	3652	chrome.exe	92
PID 3652 wrote to memory of 4616	3652	chrome.exe	93
PID 3652 wrote to memory of 4360	3652	chrome.exe	95
PID 3652 wrote to memory of 4360	3652	chrome.exe	95
PID 3652 wrote to memory of 3044	3652	chrome.exe	96
PID 3652 wrote to memory of 3044	3652	chrome.exe	96
PID 3652 wrote to memory of 4768	3652	chrome.exe	97
PID 3652 wrote to memory of 4768	3652	chrome.exe	97
PID 3652 wrote to memory of 220	3652	chrome.exe	98
PID 3652 wrote to memory of 220	3652	chrome.exe	98
PID 3652 wrote to memory of 2008	3652	chrome.exe	100
PID 3652 wrote to memory of 4032	3652	chrome.exe	110
PID 3652 wrote to memory of 3892	3652	chrome.exe	111
PID 3652 wrote to memory of 3940	3652	chrome.exe	112
PID 3652 wrote to memory of 3688	3652	chrome.exe	113
PID 3652 wrote to memory of 3688	3652	chrome.exe	113
PID 3652 wrote to memory of 628	3652	chrome.exe	116
PID 3652 wrote to memory of 628	3652	chrome.exe	116
PID 3652 wrote to memory of 2560	3652	chrome.exe	117
PID 3652 wrote to memory of 2560	3652	chrome.exe	117
PID 3652 wrote to memory of 212	3652	chrome.exe	118
PID 3652 wrote to memory of 3348	3652	chrome.exe	120
PID 3652 wrote to memory of 4148	3652	chrome.exe	121
PID 3652 wrote to memory of 4148	3652	chrome.exe	121

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\yashapuff.jpg"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3200

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:3744

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffb20f0c728,0x7ffb20f0c734,0x7ffb20f0c740
  2⤵
  PID:2500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,14161630671020318571,6140505598290649233,262144 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:3680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,11892903798620518918,6956417024292466087,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2388,i,4464270770058300464,14800611828969602028,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,16169066368552781406,9409970597823749364,2097152 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3412,i,3196227401700354283,4785413321841523236,2097152 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4552,i,2604066206062621149,11772260966120041525,2097152 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5364,i,5888551125158379443,12236694019108392153,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5704,i,17632690262649781600,3540528717177072221,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,1581746955073712552,14610976918654376320,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5712,i,9468137845220349512,2327578412410973122,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5820,i,14387149769441425772,12925221951023538511,2097152 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3528,i,13779634838954482920,6443976880149075024,2097152 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5748,i,8603901290891265229,3058260971768238972,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3416,i,9342275762642286759,7663809002366952892,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3428 /prefetch:8
  2⤵
  - Modifies registry class
  PID:212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5960,i,16004055571032077745,2353913491125620687,262144 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,17647919673957101807,18441547652863585542,524288 --field-trial-handle=2020,i,6141315539276609476,9601594581135426717,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1204 /prefetch:8
  2⤵
  PID:4148

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1668

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3226ab9c673026910989ae0777ffd81cbe09b3c1b9fbe9541c34f806dc33f18e
MD5 536ea1cf9dc540e6fb6645276dc93549
SHA1 e1b3590d7fbaf64510980cab159763e2fdf16fa3
SHA512 bc95f0cba7c795ddc3ba22398f69dc2b0d48246ce2d9ea8e65cf378faed865297f3fc738203d58da98ac16915ae9c513f5ac1ed6b8fb42f88d19d6638e4dc6db
TLSH
T1DAE02BAAD935AC7729F9472C6080574ADA4113573B90C94F363DC109CFF463A018681C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
Size 57KB
SHA256 fc3887d1cb0a2d6fac66bc7a15d3591df210b80292fe24ed28373a762da72af6
MD5 5e2be08d6fcb111ae8ef2bd3983a1988
SHA1 117a1990310334bc42e6f449843c40baeee0ea89
SHA512 904941513e9cdcce5252c9704ac5b8fcdedd93afa79e56040de6bc3032a1e79f02fd3b4485ab979075558eb0b62931abccb3489f90e48f2854d213ec128d9e1d
SSDEEP 1536:gQ5vZe5zKZNVFyQmWcLTkSRpdt5ugPZtFzv2x2dPTk86Ixa:gQwzKZDFydHIghugd/la
TLSH
T1494301790D447FB2AD9F37C1E6355E96276C10FD204EEF8C32A9DE8E605A8606930823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 552B
SHA256 0ccbabe4bac14a7219baadd314fd1214a3664f3f8e2c4acd25ab650f5ed25375
MD5 154175d3e1c648224dcc1ed307bc5ea6
SHA1 ecef8840c729fd73777a9bdcf3c1d5e971e473fe
SHA512 100d539198c8e919ab2dc20f39b28c521e4ea78b79de010da8f4da516b08bff79c8794314deace98af528baec66efa9259447dc37c6608e0254ce2c42e6bfa5c
TLSH
T16AF0E599ECD4F051DF488B3A40B41C4720FA4F9B74513F17A3C7ACA9F8AB5A1427A066
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 966965a577731271bf840396e2e969a2a55d247a33d4f2ddfec454fcd36f15dd
MD5 ca0d20247e93d0e5fac2f7a713e7a976
SHA1 0ea2bb43799f7b89ae983c5bab8da3039381d41e
SHA512 44d552b7980d9902b34886322a2e93a4bc035f206a0549938af80df644d7990b51f17473dc9eadf96834ee8cd2ea033df9dc873191d3c856beefcfd0fe9b7820
TLSH
T1C7D08CD4D0D8F19AEF4523BA10800E0374368C6F3917338797D32EA8C02F2D28702457
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 5aead4b511ec036b263208282e1408bfe9324e37a17c6f6f9b394ae078164db5
MD5 fe5cfb1ce6e798b2b8708711936fbea1
SHA1 b65059a29422987a26708c494691331e54e136f1
SHA512 391b48c8bd27f2d4875e16a0f2935f940fd03daa08c27deeb8d19bb90c60f58a79802ae4cadf22f3adad2be43f2380230ce59b7d3e11f312507a33345a290674
SSDEEP 192:DYGYb3gqbtqtbuHnqLD8htPK0tHYfaIaqKX8ZV0hl3Quf+Ams3mCo:DYGYb3gqbtqtbuHnqLD8htPK0tHYfaIv
TLSH
T12202AAF3C3E4C62DD91116F4EA283D1FDD690E2483283C66D9E5BE4B53E6472E244A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 7dc6b9d6e33127e0bafc0c84b01d3c594ae1e404480932c731a4641a376e044f
MD5 cddc3d35085c3912ebd0eacfe3f157a7
SHA1 2acc2bda99dbe3095dd74fd4c24766d5638701bd
SHA512 916b1e43b69f831af3f18b873a82b21f1ff7b80672503436c4b7591f2c4d6b68ae47589d57fce1781ba6deaa146a18d8b84f1ad7b6cb27fc23373b4a92703c35
SSDEEP 192:DYGYb3gqbtqtbuHnqLD8htPK0t7aIaqKX8ZV0hlSFQuf+Ay9v/KR:DYGYb3gqbtqtbuHnqLD8htPK0t7aIaq/
TLSH
T1F9F1ABF3C3E4862DD91116F4EA283D1FDE690E2483283C66D9E5BE4B53E6471E344A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 f8bb187cd5af4a10155d9d89af0df0527aef46f293a17e051fcbbcb85428aff1
MD5 4d1d56007b3708ab7992a735920e06c7
SHA1 28c6ad7aa3ab5e2a077aa4a8af28b91cc253180e
SHA512 591d1c34f31b0b24a2a03215bedf5d2f897d36efd4a4aa7abf5b5bf51a2230a335287dedb4231aeec4543ce40b5e4fc3778aa2420dfddc59fd8b9f5d83725e03
SSDEEP 96:DYGYb3guFVVuMWfaIaqKXPou0rumu9uXuWuruyuHuUuaugKuPp:DYGYb3gqbtSaIaqKXPo/HwK9g1+LlOo
TLSH
T172C18BF3C3E48A2DD91156F8EB143E1FDD690E24832C3C66D9E5AE0B53E6871D204A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 94766aeedb4f8e3cad8bab815b6affba805188996c608c7202f5af29b4705890
MD5 9b4b892871f0faad063d0c7e1cb8c092
SHA1 20f911f123bae755878c1833b3c52cf23015e4c6
SHA512 63cfb94cbe315f494c785fe35cfde55e19bef5f13c8ec9ed228530aba34158c53a641123f3147fca78082ff7d6f6bb1004147ff11b9bda169f93a886334fb176
SSDEEP 192:RROUxIdQxv7TIxPRptWhUe9DHsb+WNnKJiYEetf2UJkwLaIVyIsnAUgraJ:RROUSQh/GX85wgSeh2crase
TLSH
T10052B62FA920693B6CDBD629F9117757D3F61021A6E51E94EAFCCA1C14EB5CC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c3bdf916932395cea6e1998fdfed8491342ff5162ca6de2b3de28c63b44466be
MD5 cf0f68578619f305b7fd1b6756a8697d
SHA1 efaea270a32c8e2c32824f56bf25476cb38b02d1
SHA512 4c65414a2e4f5dd413cf481377f11f6e17439b595d3d484b5f10acc57477cec5873be68a18a1bad9867156b012e64e3498271fde232dce08301dbb6531ec5a65
SSDEEP 192:RROUxIdQtv7TIxPRptWhUe9DHsb+WNnKJiI8EVf2UJkwLaIVyIsnAUgraJ:RROUSQN/GX85wgWEp2crase
TLSH
T17352B62FA920693B6CDBD629F9117767D7F61021A2E41E94EAFCCA1C14EB5CC321710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ea83b6fe6dc981911953b817fe405c141f705d5895519a0facada223e2b601e2
MD5 c282fbc8f60797e4c3bd30bebaf58194
SHA1 76977cedb0e2f96e1a3254271b274dbe52e2d710
SHA512 863ee0215b6afa3ffad20de2f7086fe573c04460990e95fbbadbf0f035a31c10a906f06114752d72591d67ab52055cc441aa5f1929bdaba16910cc9fe706c2b1
SSDEEP 192:RROUxfRmv78IAPRp209DHsb+WNnKJ0Nf2UJkwLaHVyIsnAUgtaJ:RROUJRS4JXD5wg0B2crah8
TLSH
T1B542C72EA920793B6CDBD22AFD157753D7F6102161E52E84EAF88A2C14DB5CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 544f01936ad7383be05a35c7e7fd48ce6afec8d2091da28df42c51a95b138fa3
MD5 5675bc03203a5216073f6f79052fec22
SHA1 fcb974528f557d20d3848db6e1ab8f46adb64ddc
SHA512 87770cbf1d3e780fe66c5d5a910f8022081e222eb3684b729d3491d7bf0314762015a21103eff4f086e104c5a36a6806a61df60bd785f712312805778e16a86b
SSDEEP 192:RROUxXmv78IAPRp209DHsb+WNnKJ0Nf2UJkwLaHVyIsnAUgtaJ:RROUFS4JXD5wg0B2crah8
TLSH
T1DD42C82EA920793B6CDBD22AFD157753D7F6102161A52E84EAFC8A2C14DB5CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ed5c05baeb6d4a74f2454d984ac9d673e0ee99985a5534ccb02223ed75cc6520
MD5 d948c06954adff0753945d3aa05896e9
SHA1 13ca44e94f14a33cf4471ceb25c68102c75d06d9
SHA512 184c3e246ca80fb9097e8438446a8b78182c7f4c3d7c5ad30544ccff77719f6ef66dc4f9f80910043e5d69503c24c1e96639b652ed6d27038d19d3ad4000862a
SSDEEP 192:RROUxfNmv78IAPRp209DHsb+WNnKJ0Pf2UJkwLacVyIsnAUgraJ:RROUJNS4JXD5wg0H2cra4e
TLSH
T14F42B72EA920793B6CDBD229FD117753D7F6102161D52E84EAF88A2C15DB5CC321711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4db636035ce8c6a78cd3efcef862dc602b8dc6c4c37cfcedb7efe8e6a9eeeabe
MD5 692439a91750e0c8d4dcefd03ac99ecd
SHA1 c49ba36e703ff52472aac2279eea0137658683c4
SHA512 e156786545cacd59948aa6075128c6a534693ae891f9326495fed9ea596ac71d6c213d57dd07a0732067a90052b430ef04e1e17467bf312b659f4db5924c38d1
SSDEEP 192:RROUxIdQPv7TIxPRptWhUe9DHsb+WNnKJiWuarf2UJkwLaIVyIsnAUgraJ:RROUSQH/GX85wg2ar2crase
TLSH
T18052B52FA920693B6CDBD629F9517767D3F61021A2E51E94EAFCCA1C14EB5CC321700B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 d2308fba2ba12c51d3178ca185f2c396cbe812dcdf85216aacc73cf5aeb6e54f
MD5 e285b544a9c1133358c055a18a63eb0c
SHA1 3e9133209aebab6b607bd86df134405aa28f584b
SHA512 e9e4b6acf411f708a98a65d3057d2aa4fba9f94c975c19c06c05c4490342c80639c92774223853275d9299d928dd075455a1fa5f95c605452286865cdb592070
SSDEEP 192:RROUxfQmv78IAPRp2hUe9DHsb+WNnKJi0b2df2UJkwLacVyIsnAUgraJ:RROUJQS4JXS5wgh2x2cra4e
TLSH
T12642B52FA920793B6CDBD229F9127753D3F61021A2E52E94EAF88A1C14DB5CC321750B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\891d7496-cfc8-4f5f-82b2-38b3cb13b423\index-dir\the-real-index
Size 2KB
SHA256 c9d4f95d5e452197c2a810e8c38e5fb54d4a39ad535f810e30ce761b812abe25
MD5 85600f633f3ae2ecc5b93595d7fafc68
SHA1 3fc15bcd509c20e8de492116c6b22406e299d485
SHA512 a2ea4bc5610f15d54c354e0ed6f4105ee32dfce800c84fd8c682043e2a7993539fed69846668db6461ef5873985c65da74731615749b3dce9181fa4b196bfc09
TLSH
T17E51724DC8D0A79EECB522FE2C9414B193B52C38FC59C3A29194F5A630437692B57AFC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595c9d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\891d7496-cfc8-4f5f-82b2-38b3cb13b423\index-dir\the-real-index~RFe595c9d.TMP
Size 48B
SHA256 144ed8ab069c5cc355c3e9bfe4c501baf0ac88f105112a31b30a1832d7965f71
MD5 be4855be9166cc99cfb418871ed689cd
SHA1 dca6fced3084fd34e379c531cafecb7b28879aa2
SHA512 f877960229d7656d5fcf5b81a83962f328565857b0d7311ba9dbf413adf450096a2802a86c86c584e61312536a37cb49e210e2dbf3a5d4669672887daf1022aa
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 9db581b7cdf1a52b588756041f7e5aa096f603d7ae95718fdadd7c9d16efc56f
MD5 594503a20dc1e568e13304a6a34a8727
SHA1 79d02cf435fd78f60cc9138715f7a1f4615e6754
SHA512 f52dfce9eed97a0cd15f1cb77c04062008979eab337d75e7cfe4fdd0328dbd33a7a7b150faf06c90e7b3016a60cbe6bc6b1ec8193435588c75d0cf33f7d464ac
TLSH
T18FC09BF659504E8B5670ABC86078677DD61F908894C0DCE8B984B157237CD13440196D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 b9468eea3f1daebe7e208e09682e879c5bfdb1cf0d28ebd40f18790bca9c12db
MD5 878baf0d63533776409ddfb153c38a17
SHA1 ce35fabd6ff4565a5477cceb2d0852ce11aad1b1
SHA512 7b66285a032beac5c84b14930d43624fee24c651cb75bb4912cdfa8a21af1524876a10a7a0553e04c2dab0e045f107c3c01eae134d8a71e17bcdc093f64e2fd7
TLSH
T146D0A9E685305E2A2630AB8450382ABC812A89C4A8C5CCECAA44B2B220B8D02D40692E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 95cad7e694fe4b70f1d208f305306d027d34ab562138dbf8ce14a5f3701f7c2d
MD5 5507306617a21792c32d7862556302fc
SHA1 34fac3230f25e710a44f2c6eef4806181a7c39b9
SHA512 4b73993f21459a411347f82b1c339627d296465e3a12552f14b58b68c562620f4ecb5bb87f2cd9d3ca4c74c05ffb25fc25cbcb784230473cf0e7ffed55d5f27c
TLSH
T1E3C092F659509E8F4A34ABC86078677DD62F818898C0CCE8B688B1562178D23880296E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe590258.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe590258.TMP
Size 137B
SHA256 3b21c0e28ddf540d2b50c1008a3a7059fe98af7df09c7ed587413fc2f0147388
MD5 b2248181211e84f41745ee24a152ef6e
SHA1 cbb39aa79da917e4ae4a7c6a893abf5b2703e18b
SHA512 ca76951a6752a58442dae076ea6fb9878091ae6da0548b9cb91e21e4bd4067eed59dfb6b7945be1575f9d55f3b318446e7aafa650bf9ed59c9c06175faf37cba
TLSH
T1FCC09BF655504F4B473166C45038676DD62F8C8898C0CCF8F545F1563178D13D44196D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0206c4789eb8a9f7c4e50ac1c28ee5a4139e38e6915bc90318418369210bab03
MD5 6436b47f6fee0d417328f4f3ab2f5c0a
SHA1 0711fbe4c221dece028749ad9f84a6486f19cbde
SHA512 30a5f209110ea0162b64a96cb7bc26c7e3f612cf606ceddf8f3b67ff38eaea63831112e7c29b6822732ce62af5a3a7d611803cac0450137988faae9ac6331587
TLSH
T123B0122084C71680CD4043B02144114531806F32C0906342D6E059C5CC432F04311152
MD5 SHA1 SHA512 TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3652_1200608063\Shortcuts Menu Icons\Monochrome\0\512.png
Size 4KB
SHA256 d345d2dbe2efd56ff9494cb31cae0e28cde5bdf176a22bca9aee27465b117c88
MD5 97193e4d969021cb6e6ad1b25bb7499a
SHA1 69cb3acd8bc0b31b63791efc9dc47d5657bbf40b
SHA512 1df06713846ea152089ea40434f3fcff250ba2d2c0b5afcbc546b82a65b68f3ad1cf503dbc4e8246765c01f191b4f8389c4c55efb7da507f443d858a8dfd704b
SSDEEP 96:TTcYKfambSQTNpzzBOWUjfRVS/TFm9BfyKhnaBS8ZP9jeLWfbOGp:SbSQTNh9gD+mLfB49ZILWfCW
TLSH
T1B0A1968E8CB5488E66658747D48538A2C5B030A7A7BFC3BE719D174851E32C6FF29B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3652_1200608063\Shortcuts Menu Icons\Monochrome\1\512.png
Size 7KB
SHA256 1e0b1b2e4dac49da1e2ce91a72e01f77fdb3bbb26ed3422e5d4037745cc307a4
MD5 cc525d60c0dc9696ddfe9524dc9abe82
SHA1 fc94cbd2a45bf2ff0fbe411f57a7cafa31126bfd
SHA512 09ab42f7dc3d6a08b9635ef229539a5c4c240506378a9de4eccf1f69d52b266222cdf084e9a567c6d21f19e61c4da7ccd98928870d6f10cd74e9158c64a4142e
SSDEEP 192:U3/tgbWgm8Xl2X+xqWwB3kUXPmv9rCywxAQU:2/rgXXExWKdXPa+txrU
TLSH
T159F1AF6F639B59EA3AF8493D4BD7A21FD62E108A2F275B71C5101045628A1C1FC69F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

512.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3652_1200608063\Shortcuts Menu Icons\Monochrome\2\512.png
Size 9KB
SHA256 ad08077126e7106674e4219f5f9cfac2305e8b3f627247c1d3e72136399e6fd2
MD5 660ae59d489be5b5e1e9036b88b4a033
SHA1 b1ebdb9421bf14b5c43a399b4dbd92288d91a604
SHA512 3bf52f4d1e92ececb7691bedf1f53dea75041615447eac2c1ec9f99d07417a571e08fbd2db58896506350e8af831e8fc943d35e35747a8cb6db9a03d880331f9
SSDEEP 192:uJTyU9sUZdxl59pfNK8EliT9Tjx/t0xM6LwZx4nwBmJH/Rr6O:g9sUxXM8iiJKMfcTJIO
TLSH
T1F022BE9744E4E7A3427CAEBF4684D914DF4E1B7384366E10020B199F0D7AA8268E8B93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16.png

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir3652_1510183547\Icons Monochrome\16.png
Size 257B
SHA256 d52376c8b210b8003f5aed9f4555a7916b4640d4c42a36cc81d9864991c87a8b
MD5 6cc922565abd761f4039c816d86018c4
SHA1 05393c91529467f8ddec22a121fe482701365d6f
SHA512 8732f24ea85ab3fa845b3cfa2a354a85cab63a507947fb61bd8119c623e31c87d6f0735ce7f06119db597ec4fce4ad44c15046859b574cb11fb1306e489cf995
TLSH
T1ADD095F2E311DD34C52E96900533C473F433171B1DD56055664491DA4D9E90533C8D59
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 e1c34e88ea0f39d521ccaf8acbbdea52c9ebc65edf136a4d42721575feec6d5c
MD5 6e11f571803874eba9b0b5a54c79d560
SHA1 072fb5a3364a88c17d847bfa97b184dba90d456a
SHA512 5d33f7fc5a03a63e86789c9be0b4b77199dce0db658c6820d4dba48f1ecf91ab1cb4cf56be0ef2d73a768619e7b4d5d6b6bd5db4df226ec10eacae4ba48caebd
SSDEEP 6144:V1Hbhck6sr0vF191xGSD/itJVXYD5U1xm7Rkm1tYpBeh2BAol:f7mtF19rrD/KJNY61Y9oBGcAol
TLSH
T13D3412277C30AD775AB5574C308B391E2EF08E77DB549896E0D9BF0839AE29C4E09934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 89fa37ef7f94d8ec1b485df87630549843f61e049dfddcdfdd4e7f4aeb871025
MD5 7a510ab77a5fa8dc0dd9fad9e199fc24
SHA1 edfa35a0d1382575ecccd4415467c2d6f35cabdb
SHA512 fcae2f1adf5347a047aca7c1c9fe370a03972d7211a51678603aba9204075ff3fffed6e82739a6bbedfe1f904b41d8da01c9b5070417dd7145807cddcaf6ea28
SSDEEP 3072:/OGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMr:/Jm7Rkm1tYpBeh2BAor
TLSH
T152C3123BAD75E9375CB9B71AB04E0A1F1DF14DA6C930DE52C8D89B0423EA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 0e56510bf736f1e5ff7693e5fe78d5540f537a77fd4a60422d47fc1d92ad5ae3
MD5 59aa315c8c1ee532ed42ddaec36aebea
SHA1 42203d30ad1fe1e749812948c68a4805834a3f9b
SHA512 da0e69954c3ebb2c0ff39d7ec7d0310d6a7ad736b3760c8169ed84b0e16f850a2f3a2ed156be0e2a280054e58744e825ef90dc85e31f03190e65c452a0b3167e
SSDEEP 3072:YGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Tm7Rkm1tYpBeh2BAoO
TLSH
T1C1C3123B5D75E9375D78A71EB48E0B1E1EF249A6C930DE42C8D86A0437FA7CC1A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 ad930158a867c97a0ac36a76533e0c9fdf7a40bbe89a04b68bc395c85fdec3ef
MD5 69bf010daa8b60e17d66bd7848aacc2c
SHA1 718b28f01b45afe667d8bb5ccfc549948a38e043
SHA512 6becaed59608bda1f9c88cdfd6a1572c6958830efcf164834a0d3335c5142e9aa07f4749a0af2bb80f5a9dbc590f3a09f75b908d1b99eecc29ffdffb5314493e
SSDEEP 6144:xJbhck6sr0vF191xGSD/itJVXYD5U1xm7Rkm1tYpBeh2BAol:x5mtF19rrD/KJNY61Y9oBGcAol
TLSH
T1C63412177D30AD7759B44348308F291E3AF08D73DB5499E6D1D9AF082ABA79C0E09A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 237KB
SHA256 e9b724fdfe9d6e5b677d04ab91f1d40e09a92cdf2a3b23c4edf3c490354cdb53
MD5 464ee2d7607d1f9d688d607063adf051
SHA1 2edaad792616bc6bb5e0d303a5d26bc09a54e500
SHA512 32920009835783079bcbb0ccd0f4e63f29565877807434145249980bd07e5efe846bbf2e798d0228eae04e1464242b6ec77c768917b07387e4cc6f53f30ce520
SSDEEP 6144:p1abhck6sr0vF191xGSD/itJVXYD5U1xm7Rkm1tYpBeh2BAol:TmmtF19rrD/KJNY61Y9oBGcAol
TLSH
T1E03412277C306D775AB55748308B391E2EF08E77DB549896E0D9BF083AAF29C4E09934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 238KB
SHA256 aeeb7a97bc16cee0a9c38f6b74dbf524f910ac2b71fe7e083e79cda1cabc998b
MD5 3a81d0dcb57df8c6143e31980472cc07
SHA1 047756531d2a7985caf149f69d72c79c915000dc
SHA512 b42150d7634d3092876c81125074bc1228b798c8aa97589f108d8a0b8820233caa1f14befb8ff4101feb96eebc5a1df1891f2d1b57ade39e25f4fdd1ef0ce87d
SSDEEP 6144:J1Hbhck6sr0vF191xGSD/itJVXYD5U1xm7Rkm1tYpBeh2BAol:z7mtF19rrD/KJNY61Y9oBGcAol
TLSH
T1883412277C30AD775AB55748308B391E2EF08E77DB549895E0D9BF083AAF29C4E09934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download