hxxps://roblox[.]com

Analysis

user interaction
yes
max time kernel
899s
max time network
876s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 10:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://roblox.com
Sample260803-m1p5msgd44

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4840	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302281843585968"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{48F0277E-0546-410C-A173-84F7C7CA7A07}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
2972	chrome.exe
2972	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe
Token: SeShutdownPrivilege	4496	chrome.exe
Token: SeCreatePagefilePrivilege	4496	chrome.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe
4496	chrome.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 2436	4496	chrome.exe	86
PID 4496 wrote to memory of 4872	4496	chrome.exe	87
PID 4496 wrote to memory of 4840	4496	chrome.exe	88
PID 4496 wrote to memory of 4872	4496	chrome.exe	87
PID 4496 wrote to memory of 4916	4496	chrome.exe	89
PID 4496 wrote to memory of 4916	4496	chrome.exe	89
PID 4496 wrote to memory of 3848	4496	chrome.exe	92
PID 4496 wrote to memory of 3848	4496	chrome.exe	92
PID 4496 wrote to memory of 2200	4496	chrome.exe	91
PID 4496 wrote to memory of 2200	4496	chrome.exe	91
PID 4496 wrote to memory of 4612	4496	chrome.exe	93
PID 4496 wrote to memory of 4612	4496	chrome.exe	93
PID 4496 wrote to memory of 2680	4496	chrome.exe	94
PID 4496 wrote to memory of 4088	4496	chrome.exe	100
PID 4496 wrote to memory of 1052	4496	chrome.exe	101
PID 4496 wrote to memory of 2976	4496	chrome.exe	102
PID 4496 wrote to memory of 2544	4496	chrome.exe	108
PID 4496 wrote to memory of 2300	4496	chrome.exe	109
PID 4496 wrote to memory of 2544	4496	chrome.exe	108
PID 4496 wrote to memory of 2972	4496	chrome.exe	110
PID 4496 wrote to memory of 2640	4496	chrome.exe	111
PID 4496 wrote to memory of 1688	4496	chrome.exe	112
PID 4496 wrote to memory of 1688	4496	chrome.exe	112
PID 4496 wrote to memory of 600	4496	chrome.exe	113
PID 4496 wrote to memory of 600	4496	chrome.exe	113
PID 4496 wrote to memory of 4004	4496	chrome.exe	114
PID 4496 wrote to memory of 4004	4496	chrome.exe	114
PID 4496 wrote to memory of 4660	4496	chrome.exe	115
PID 4496 wrote to memory of 4660	4496	chrome.exe	115
PID 4496 wrote to memory of 968	4496	chrome.exe	116
PID 4496 wrote to memory of 968	4496	chrome.exe	116
PID 4496 wrote to memory of 2940	4496	chrome.exe	117
PID 4496 wrote to memory of 2940	4496	chrome.exe	117

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://roblox.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9b40bc728,0x7ff9b40bc734,0x7ff9b40bc740
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,7626404541234172901,14040848521184021738,262144 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1984 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2080,i,8132125096329197008,13565200175249120019,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,9583241975891070558,1058134171052652894,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,2604447796918912293,17029030455545928091,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2876 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,12901298569819788658,7417119372516803967,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4536,i,4655714093329135003,9223141275535428349,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,15778112786827269245,14240527209050807061,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4824,i,15973142856707313813,10558298572462959769,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3088 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4784,i,17622105733267364049,10894196997925813126,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5760 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3336,i,7248457554389252170,11534267381610746768,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4832,i,8449364438637298121,16611328890511202065,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,11399578928325369179,4946918710017168604,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5736,i,13202492209572056321,4770040180886999400,262144 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5920,i,17236921550271553147,4420508417662967876,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6200,i,17268959909050664565,10830155495159351906,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1132 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6308,i,8463487569912761844,163595634434405027,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4588,i,12668966998224151182,17645752538472711623,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6472,i,12692706052582488734,1002708982433647163,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6600,i,12780130214571486238,3767671445587782938,2097152 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,7745874346735215126,7968701156542990557,524288 --field-trial-handle=1988,i,1713020662288814242,7822018465563612457,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:2940

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2972

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5be5e239-51f4-4f02-89b5-f544816b31ff.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5be5e239-51f4-4f02-89b5-f544816b31ff.tmp
Size 414B
SHA256 4ac59d700b2ed79860d5587b0765507e9ae6dc5e9c93eed098b7215ed535bcf2
MD5 34ba9e3ab225e481db73841cbd831ba9
SHA1 29ecb81486772dbdd155a432f4f3b802c90ba002
SHA512 10cceabc878b4c4594363a61f39bfbfc0016f566506c158f8788d18f2f24fe1d29d7ddb13d8c700f6a37dba4f3704e4539943160a0a76859020e89333c34ef7a
TLSH
T18EE0E5BAD931A82718F9476850805746D64013572A80895F363D8109CFB867A014581C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c5f82ab5a92b849645ac96cd30229afd48a4e81c5c203d35ce0761f4921a8c92
MD5 b10c775d1336d582e102e6583f8d972b
SHA1 6aef0396fe9ed205577cb150e4fdfbe5299428dd
SHA512 decc15a23e7ef46a7e3b5f9c9062c199bb85f60c75c7f0b8ee195b87571dcb57326afc896a31a6943ebf855e9f5955d3625346a6de05bba4e2a17bcefc709ab3
TLSH
T1C2418305DBF1A412CFE0417116741CE7591F155EC2FA3BBB1A8826B3E44FBE47A028D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1ed25916b42d626935ffd685f6d07b77db98b6055292494481aeb36d3bb719de
MD5 6bf988cbe1c019ded53697ef33529846
SHA1 03d439f25decc8d5145d61869662185cda7b8aa5
SHA512 a5405391a3fb70d0c6cd9f1ac0a0a7caa27dc8db0121d98a41ce7ffb30959629c83b5d4d753aa27dd7fb7ed74a59e8fe4aad9cc3541a7dc8b951411e2bcbc912
TLSH
T1E6715E46D6F19602DFD008F114601CDE612B455AC1AA7BB76B8DC573A3AF7DC2701CD4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 28b2102a8ab70c5a905e499012c7e324c0b53648fc9e0d909037aeec953c0438
MD5 cff6d86c9e0ba1e2e5c4af9ba5bb02af
SHA1 20e14468264ef7deb8effbba27dab7c715824eca
SHA512 fa8e5065fe2c4ee8bce3e29697b2f0b074d136aafcefb7a3251c148c13a3f6a49b0b49da549b09d344d3311992eaace92f810eb50214af90019387a38513ddde
SSDEEP 48:3kuMV6OGraWnh5xBwU7UkNJvPSdN2t/8XOip2X6+F/QQyF9veovyllJAzy3+sv5P:3kZClnjUbNWY2XL2XPvpy3+u5m6W65l
TLSH
T1DBB1E91D92ECA013DFD020B004AC0EDE643B850ECDA67FB73B0985B2928F7DA15B95D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000003.log
Size 97KB
SHA256 1e3edd6720ce37cb0e35dcbdf9a86720d0fe7b436f3478a2cd421be4c50fd135
MD5 a546a0f09d7d1f673c29e5565c10ad81
SHA1 e35fa678944fbaebbced6e7ba6688f8df5ea7808
SHA512 17d9e64bd0e243954d0315ae5d672af18fadc382c7b99b7d64823e75c6ea997f33472dc5c3ce028acaad1809b28f45184246602481e64bfb48e97b0fd7d83ea8
SSDEEP 3072:2ye5BEfnNNpAuZUL3TF+SIwmpZKsi7M6ywDLg/fCQLelTFBR6Qm5t24SvznTERra:tdls
TLSH
T154A36C9B3774818AD1741CBBECF18BEBA3E66E41BD63913F90E077E899355850832352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
Size 347B
SHA256 8edab5d5c300aeb801d30ce55fa74cdd4e3904bfb9aab018c3c1976b21428846
MD5 dc5b15fa38cbe940232c5542dd668e51
SHA1 a08c136e22c0e12feb9d6260dfd4cc6f5b467a42
SHA512 2a1f4ef18fe07326b5ab7ba6d1a7aaea6f0b6febd11c6addb35b6bc5edda1d502602223c61d3b3ef270ee7eb793e58a4de5fd8fbcb586994305bacd2fd83005f
TLSH
T114E0D86895D9CA5F219480677634774E9AE2251CABDDEC865F12F41560C900CA468671
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 42c81063f5854fb93a33f5c1ab79a820d5cb96e9ab9a746838fe6db3bbfc242c
MD5 4ff59b4fdd67fb27bb65aa5d8e1e57bc
SHA1 85301b9ec86f65aeb492e06d01366a19bd05dcd5
SHA512 ab44f59ad90e8c118420e5439a6fa0fc122550dd9f5bd792dc6f64bf91df2a686c35ead4980e164252f3cde895f768a31b7e964924a1a0aa165a42ed34c84ddf
TLSH
T1EA4148B7C7D8897D890156E8A6156F2FCD690E14531C3C1A88D8BE0F93E6876E20059E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 af329b0253eb4be609da292ff8c058ab7344d92063cb4ea83103e751d8e86de7
MD5 1487b4ec04e685fab6a1b5e6aa2374ff
SHA1 a107ca018a9d0eac0d4aab4c2df928b00c09c3d5
SHA512 5d51da70c7df7ad1d8f901202619e0b816f58c6238a374e91b9201c7530d2d6ee0182b320bfb2ede7a6a09858fcfdc24d31fd976c214a6d8979c6620908d7173
SSDEEP 192:DAIF+hBrQjaIaEdHNXtPiQTQHEVjJe0U5ZNf4Ejhn+MOssHxufzKRzUPK:D9AhBrQjaIaEdHNXtPimQHEVjJe0U5Zm
TLSH
T17E028AF393F5C96D9A1656F09A09AD1BCF580520031C38B689E0BE5793F35B2E201B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 e955b41bdaa7ecfff2fe80df7b27d01fb57588fe412a749ddf2cdea0dae73d01
MD5 8fac702a789dfa052fcf02005b90899b
SHA1 294bdb926a717d06c4757c0799ce363cf0143e50
SHA512 6e7fa9046b6df98817e61249ec53b7ff9ec897c44562d6bd7d86bb903020841c3e5ac1d7ff64e8d3f945b7785e98dbf1ca4fb60f2d24cdaae3d66ab25f54d4f4
SSDEEP 192:DWIu+wBrQjaIaEdHNXtP9QTQHEVjJe0U5ZNhEjhn+MOshHxufzKHzUZNHy:DnbwBrQjaIaEdHNXtP9mQHEVjJe0U5Z+
TLSH
T17FF18BF753B5C96D9A1696F09A09AD1BCF580530031C78B689E0BE1793F35B2E201B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 4efad9dffabe8759c2b25fdec73457a5f3228afaf26eea26459d0bcdf2d19f37
MD5 975bb43d449657b890d92628607744d7
SHA1 5977feae7c3ca210c17ee7d007507dd1581b8bb7
SHA512 7457f0ddc5a43f7782ff877dfb20ce6c98faf5c8d264d632c139a63c9d2d48234f3c52540986d839b26aeeb9f9ab4bc600f65c503b24905b3819021bb63d7472
SSDEEP 192:DWIF+hBrQjaIaEdHNXtP9QTQHEVjJe0U5ZNhEjhn+MOssHxufzKRzUPHay:DnAhBrQjaIaEdHNXtP9mQHEVjJe0U5Zm
TLSH
T1240279F353B5C96D9A1696F09A09AD1BCF580520031C78B689E0BE1793F35B2E201B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 aab4ec4249bf8adf2be72c7941a44f730489a4d4ea05650ecad7dbb420be709e
MD5 40d80f6da5f388442e08df647eec2740
SHA1 b72add2689aa2a46636ea32446e4331ca4474bc0
SHA512 82b9083b2bfff517698caabd3e5a02de7a37ab3838ebb5160f205886f020559548f7510db8e5b4f4baaa73cdb1ba06c624c2aa0af623be7cf612f346f3a86f75
SSDEEP 48:YALlOXIO8+hjOMzaXYfo7Ed7MaIsdjNhlsdHHUsdKHAuxUsdhngf3sdbQ7a:DAIF+hZaIaEd7MaVNhGHAHAuJgfsQ+
TLSH
T153917CF753B5C96D9A1696F0AA05AE1FCE6D0520031C3876C5E0BE1793E3572E201B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 912e9c4605587c8f5d17344b6334feb5e8c1b75f9d24d9c43fbe36b704181c99
MD5 0a21f57a938016928cefed3264f8fc24
SHA1 c6398880cf730f21dece0ee87ac32fa228f1abe6
SHA512 d47df79afa6419517f36e65443d64f6d66321e6c54e58d48f7712cff3b9ec80a8d1974cff0ca5ac4acbffaae7b50cc97547ef8998f83cdeba8144a311edf60c7
TLSH
T1EC4148B7C7D8897D890156E8A6156F2FCD690E14531C3C1A88D8BE0F93E6876E20059E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 5KB
SHA256 115180b85c05e3b0fe2f7455f28cd6d5b8f858d6b450487ac4effb033fbe7d01
MD5 ab988c6c7ed5098e6a00a214d61434c3
SHA1 c4418b470a6bdfc818ad89b21cc0fe922bb3e179
SHA512 8df8cc030aacc0099445a2ebf53715323be613187d3e66ca7b208243be25795dee4b8d3f81c1899dca7eed2dc81a0cd83f619d05cc8434d554441368d83f8209
SSDEEP 96:iAUoEQUfHtkUs4KUbcIUpJUlHI/UzIoUUNU1TUMvWUc/UUOhURYzUgbdU9YQUaoN:iAUQUVkUoUAIUpJUa/UMoUUUZUpUc/Ur
TLSH
T1B4B18F9BD2BE745B207C6BBB1E447C0565B7A83602A2BCF5CB56952CB0874F31726072
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 c0e275c5ff200dc32bd9662cde669409e6863a5708faa837cbcb8c2bec77aa0a
MD5 d9ff09811db63459c2c20c057452af56
SHA1 a83ea501617d9f2ef6872058e06d5528b6102543
SHA512 b5d2d8b51db0b813b014bb79567dfad773e372e8569bf9c850b23879fb0e8a77f08715dd71ff931012fd05a3c2ba2a3d4c28c6e68a3e5e585bf32cf6cd5afccc
SSDEEP 192:/RQaxRlav78pAPRp23N9DHsb+WNnxOIWV209eEYagsDVyIsnAUge:/RQa3l24UX05wkz2Bagsle
TLSH
T1A142B52AAA60693B6CDBD229FD657B53D3F6102261D42E90EBFCC92C14D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 fa0a6696b0aa2b90d2ea539f4f7b830901488b8c3011573956095f61a9ac6562
MD5 978488dd27c95441f23b523cdfa9a10a
SHA1 d4a5f0e0bddd0ce2cad83285b24bed5c2be33d63
SHA512 2ca3e7cf42899ccdbad7a506806ccd20917e6f6ec79aeb0a591416ee357dbe80c0aae49cc6141fb81bdb2fe40e2cfcb89435230323854d3e31c79259d9613bd4
SSDEEP 192:/RQaxRlYv78pYPRpT319DHsb+WNnxOI5+eGj9eEYacsDVyIsnAUgE:/RQa3lE4MXR5wk7eGuacslE
TLSH
T1A742C52AA920693B6CDBD329F9657B53E3F6102261D42E90EBFCC92C15D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5fe21e0542a0e9fafbf19231cddb6c62265a1ecece190b08b7acc1d21feb6795
MD5 6c46b333b714bf9adfc41cf89cd46eeb
SHA1 0b98a32945f6b597569223663dcd48243b4baff4
SHA512 4ab1615c1f18d21f51be6704a6f91e7b128118afead416752fd4fc6d431a68d30488d6ce45c9cd3d9e056e4743ddb2bc791da7c8122ca32e68e63aeaa8e10459
SSDEEP 192:/RQaxRlxv78pAPRp2319DHsb+WNnxOI5+ek89eEYaCsDVyIsnAUgE:/RQa3lh4UXg5wk7ekpaCslE
TLSH
T16142C62AA920693B6CDBD229FD657B13E7F6102261D42E90EBFCC92C15D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 40718a4bda884c6f209786d0239b094476852f5c7bead57d305b1ca1fb5aec34
MD5 32581e33d72fcdf55baca5bc7fcf1e8f
SHA1 212d148e1f6cecaf73d78f684660c6075678f47d
SHA512 c63de83343b40307e847355acac8ca98d7be85c9a757dac6a95de2f6cb0293dc014bc7b82fddf7aa40b50ec848b139d0e0ead7cd451e37e52ca88edc60f84c3d
SSDEEP 192:/RQqxRlIv7fpYPRpT3B9DHsb+WNnxOIVbeWj9eEYacsD8yIsnAUgE:/RQq3lUrMXt5wkWeWuacsAE
TLSH
T18A42D72AA920693B6CDBD229FD657B53E7F6102221D42E90EBFCC92C15D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 3b94f50be36869939dc33f98625c1e18368beb7f8d9cd3eca5a4e790425ee54d
MD5 7df28ad26117335956881b42e6a2ff2c
SHA1 e1754bee380988327cc0656f4ac1e4d58285889f
SHA512 23cf88c003c823fad3fd809e5879eed399011d190129b93718d53ce0136a9eaf3883908cead44ed461a76035ac2dfa789752f80f63db588f65ff634140bf714f
SSDEEP 192:/RQqDRlvv7fpYPRpT3B9DHsb+WNnxOIbQOkj9eEYacsD8yIsnAUgE:/RQqdlnrMXt5wkjOkuacsAE
TLSH
T17542E62AA920693B6CDBD229FD657B13E3F6102221D02E94EBFCC92C11D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a61da2266092e1ac627707871f797d3481d9dc5b388c062d4590b59d03467a10
MD5 ddf148cfd212fd30110301f9c742ac51
SHA1 9befdcbb8682c8f20460781cec7563e9cebb18e5
SHA512 6823c7f0a5a1d21a97a6684a73255dacc19cefcc9f0c837baab4d138171c488e5e397d19da34b354304dc8f6e124d94d9d4c59a72ee826426f4ef53750a70074
SSDEEP 192:/RQaxRlIv78pYPRpT319DHsb+WNnxOIQ+E5j9eEYacsD8yIsnAUgE:/RQa3lU4MXR5wkCE5uacsAE
TLSH
T1C842C62AA920693B6CDBD229FD657B53E7F6102221D42E90EBFCC92C14D75CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 fa0b324f77cbce41ca8a01ef04fb2ddaf8f8685fdcb9172cf4061cfbf855b4c8
MD5 d3a352fa7fe016e86c024d08c884ddf4
SHA1 33552edb36a44173989d2b30f7fc1e2495b756e7
SHA512 6c349f799c61a34c26b4b58fc71686d3844f2c504ad015326c1e1c74f0bcc2d23890494ff70c5ce594ceb8739650e9ca6b5d9dec21fca411c612e308cad850c7
SSDEEP 3072:7XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:7Wm7Rkm1tYpBeh2BAoO
TLSH
T18FC3123B9D75E83759B9BB1AB04E0A1F1DF249A7C920DE46C8D46A0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 b3ece7d72a9033d47de234f02ae66ef47380698bc8f9aea0670c78fd5f243499
MD5 b5a063b7c5ed3412a88b119c7295409d
SHA1 b8bccc5bd61768ce2a0be7524386db343a412d0e
SHA512 baede92f8cd28287850a83ceeb682b44ce98bff42772db2f637877b1b576cdbf3e43d40dbc281f7a5f46b6c90ecfa324dbfac21a4936e57a14f14360a707bd69
SSDEEP 3072:tGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:km7Rkm1tYpBeh2BAoO
TLSH
T165C3123B5D75E9375978A71EB48E0B1E1EF249A6C930DE42C8D86A0477FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bf7c972017f926cf1b6e871dfdfc21c0420450eba35b02572456646ee777adac
MD5 a35131a9029fb60844d573c4ed07a7ea
SHA1 32cc21b269e1965f6ba2094eb79b26a9e7d8149f
SHA512 f37407f149a9076ceba35df1af6655b67f6db4f40317f5f672181c872a47de6f026eecedfa12fb0ccc6de6a7a016e0fe1e0f9645b5135d477e2c8095a5c53a87
SSDEEP 3072:eOGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:eJm7Rkm1tYpBeh2BAoO
TLSH
T1BAC312376D75E93759B9BB1AB04E0E1F1DF14DA6C920DE52C8D49B0423EA7CC1A48A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6b1287972962c4b842358f7f5a4b2aabf0aba07888eb8b46d03aca495ec0f3ca
MD5 04a3e9d573f7d229a15dfc0eb134f423
SHA1 721cde9a9ce97afb0456faa45437acb34afa5999
SHA512 ab785960e33ce25b5295d107b141fc3895173e3e2d3378b83312e0d81f6b82a7b738767998f59d9b6375e72efcd88e2568235cbd40dd0b8547033bf125d558dd
SSDEEP 3072:BOGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:BJm7Rkm1tYpBeh2BAoO
TLSH
T1A7C3123B6D75E93759B9BB1AB04E0E1F1DF14DA6C920DE52C8D49B0423EA7CC1A48A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 430c89c952497a1b032419be7a858554c78148007435b481f270c8f40b0848a7
MD5 ff4c5f4e87fb415652624cc6156c0cd2
SHA1 b0047804997b65c5c9889efdc502937643dcac1a
SHA512 e3c31c7c8d1d6b1fdd40f11689e09cf5ecb68a9580449b1773e5aeec5cb0250adfd3bdc35707c2cd057385bde9fc9f74505511499eeef332add09bde5a1cf0c0
SSDEEP 3072:6XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:6Wm7Rkm1tYpBeh2BAoO
TLSH
T1B0C3123B9D75E8375DB9BB1AB04E0A1F1DF249A7C920DE46C8D46A0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4fbaded66a7a491ab7eb0d7b4aad87a4f51fa61fb3a4081a0144dc38b1f0ae7a
MD5 f5b06df7a82612c308894987101037c9
SHA1 af1a9dc54300af244da5eebd57b8ab71a5028e7e
SHA512 06831ffd8efea41b057d5c9111d52506d09f0ea60184f8953cf99f1da68d69b0eb55daff28b1ea35d091fd3531776923cf5f5bdae6f8bc31c8e86305828a10f7
SSDEEP 3072:+XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:+Wm7Rkm1tYpBeh2BAoO
TLSH
T13AC3123B9D75E8375DB9BB1AB04E0A1F1DF249A7C920DE46C8D46A0433FA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download