hxxps://app[.]amplifa[.]ai/s/3f83169a-ff17-40de-9a7c-a7dae53553ae

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://app.amplifa.ai/s/3f83169a-ff17-40de-9a7c-a7dae53553ae
Sample260803-srrvrstyfx

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: 758681729565rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4260	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302441357870005"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
1216	chrome.exe
1216	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe
Token: SeShutdownPrivilege	532	chrome.exe
Token: SeCreatePagefilePrivilege	532	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe
532	chrome.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 532 wrote to memory of 4240	532	chrome.exe	85
PID 532 wrote to memory of 4260	532	chrome.exe	86
PID 532 wrote to memory of 1092	532	chrome.exe	87
PID 532 wrote to memory of 1092	532	chrome.exe	87
PID 532 wrote to memory of 3188	532	chrome.exe	88
PID 532 wrote to memory of 3188	532	chrome.exe	88
PID 532 wrote to memory of 4596	532	chrome.exe	90
PID 532 wrote to memory of 812	532	chrome.exe	91
PID 532 wrote to memory of 4596	532	chrome.exe	90
PID 532 wrote to memory of 812	532	chrome.exe	91
PID 532 wrote to memory of 1400	532	chrome.exe	92
PID 532 wrote to memory of 1400	532	chrome.exe	92
PID 532 wrote to memory of 1832	532	chrome.exe	93
PID 532 wrote to memory of 1832	532	chrome.exe	93
PID 532 wrote to memory of 4984	532	chrome.exe	95
PID 532 wrote to memory of 4984	532	chrome.exe	95
PID 532 wrote to memory of 4512	532	chrome.exe	96
PID 532 wrote to memory of 4512	532	chrome.exe	96
PID 532 wrote to memory of 3876	532	chrome.exe	97
PID 532 wrote to memory of 3876	532	chrome.exe	97
PID 532 wrote to memory of 2400	532	chrome.exe	98
PID 532 wrote to memory of 2400	532	chrome.exe	98
PID 532 wrote to memory of 2200	532	chrome.exe	99
PID 532 wrote to memory of 2332	532	chrome.exe	103
PID 532 wrote to memory of 1516	532	chrome.exe	104
PID 532 wrote to memory of 1044	532	chrome.exe	105
PID 532 wrote to memory of 3444	532	chrome.exe	106
PID 532 wrote to memory of 2852	532	chrome.exe	113
PID 532 wrote to memory of 2852	532	chrome.exe	113
PID 532 wrote to memory of 2504	532	chrome.exe	114
PID 532 wrote to memory of 2504	532	chrome.exe	114
PID 532 wrote to memory of 3456	532	chrome.exe	115
PID 532 wrote to memory of 3456	532	chrome.exe	115
PID 532 wrote to memory of 1544	532	chrome.exe	116
PID 532 wrote to memory of 1544	532	chrome.exe	116
PID 532 wrote to memory of 3548	532	chrome.exe	117
PID 532 wrote to memory of 3548	532	chrome.exe	117
PID 532 wrote to memory of 3444	532	chrome.exe	118
PID 532 wrote to memory of 3444	532	chrome.exe	118
PID 532 wrote to memory of 1216	532	chrome.exe	119

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://app.amplifa.ai/s/3f83169a-ff17-40de-9a7c-a7dae53553ae
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffe8c3c728,0x7fffe8c3c734,0x7fffe8c3c740
  2⤵
  PID:4240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1928,i,8086033430734830490,310663596805633289,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,5673271639962954011,5145633839184995103,262144 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,10544397191641592454,10678144383786534765,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2404 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3200,i,2518920007629666892,14460149889970104124,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3212,i,3722501697886493047,13297190406479719744,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4380,i,3306824908953171526,5712125310540829456,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4396 /prefetch:2
  2⤵
  PID:1400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,2782610540973248821,10720604981498324380,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5016,i,4340880096779197720,8006326042739663645,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5348,i,15874529769494942353,15490358427403238010,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5484,i,16640742027379902931,9930773141436259525,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4740,i,2279195353869936303,1407896880583918871,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6276,i,3518213636533704295,8025725095198606960,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:2200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6372,i,13446844281369419132,5883977726343886788,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6560,i,12436016269609047284,14008318422844001025,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6572 /prefetch:8
  2⤵
  PID:1516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6564,i,5228469435738888265,3399931665269656438,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,15826985649758091441,17753374066913360992,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5152,i,10944007446674807336,15811974122887768313,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4864,i,12241660568583431081,11873038020928765343,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5220,i,11283588203780229655,7437345365902389264,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4768,i,13389506599017663803,12696061850182251570,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=4828,i,1883349950309666864,69577372129682295,2097152 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6664,i,1105318827583605543,3124508132319814505,524288 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6672 /prefetch:8
  2⤵
  PID:3444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3432,i,7663760737917569241,7164669453894104738,262144 --field-trial-handle=1572,i,897070291101036621,8291817256484711485,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6788 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1216

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3556

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1dbf2e8f194522be9d0884fdd6d14b6d729fdc80b963cdb56d7cf0255be3f937
MD5 3d3898c70a475dfcfb63b3cc3b0d5ccf
SHA1 8f7b044741d81550cbba1db45e2b5d870e31f3f7
SHA512 850788b4906850847f9493a922ef134d275362afa51a800b05911a046cc5a3bd8c78e52d359ee32bea71d3aa56ff868a1b28b3430cc03114aaa4b0539cf5e8a7
TLSH
T120E022AAC875AC772DFD072850914B49EA56135B2A91992F3A3CE21C8FB0A2A4586C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d
Size 41KB
SHA256 d5025e5c9b4fa99ec7204c91f054c7145fccdb24d8d3257d1be108bf9702bbe6
MD5 edd2b6655252b4e6d5c5cc775b4ceff5
SHA1 ee259ece556da0aa449bdacdf6dbd2393ac0db56
SHA512 20faf34e5e2bca8fde2f561af1dde58c61bbf550fb87fe74175d17de24d34e923dad864ca1011939f2f70600d357047a0b4781eca165515ff76ac1945765e4f4
SSDEEP 768:BEU/qZdqVxGDRsdtKBVYEe4h42aO0FzDzEUF2TUvWH36CvOORk2akYSKb3Z:BN/qZdqVxwI7EZh4/FfYUFI2WX6+k2Fa
TLSH
T1351302117C41D685779FB6BA4A75296932F4F72A28D18C54DC26107D0FADCF38AD0BA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 408B
SHA256 d76139898f259d3e1ea60b4664b82f3f64980e77eae758a7724b4ce40d8130ff
MD5 a8876ce12c44a19d537dea9c0cc75bcc
SHA1 8efde6711ec0971827734c114556171dcfae09df
SHA512 8d1d980c457c242bf7c153a80089b91ad8797ff2024f855ea7502f192cb5208713dd0106cda6c425b40ea39644ccdfb0dfa628954e4393d4bbea6c5222a52826
TLSH
T108E07DC10160D6C5D374357217C148FFB030446105077F830354F6E6371BBA86104CC3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 cb68906146018989d509503962bb678267335fa7ed6118c6e96a4bce62a5ddf7
MD5 a5917dd4e6d8317d9c16451aae7f23f7
SHA1 43a09ec82820624ce2b7213fa4b1152ea1f7da63
SHA512 76fab00b3af9a278ba3e4d6556724d705ff7f46495dc46bf47a67927950eccc476af8e598b1c328fb86ba2e7a09051d3ce58fc5db4b34a681ba91545ecd5ac65
TLSH
T1345188A42183C6BADF901E3A07E148657231680D2927FFCE2574D6B13BCEFB2605C84E
MD5 SHA1 SHA512 TLSH

Submit Download

27aeada4-d4bb-4a52-911f-1e1cded8873a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\27aeada4-d4bb-4a52-911f-1e1cded8873a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 07d22a6e5d898b54b5b6a051bc4877b41bf4d33429850e48a542c715975fa9d4
MD5 7f686710cbbf418914a4b40c9c0323bd
SHA1 7bc1a7cba5d96310923e50fddf12091ed046091f
SHA512 67494a718eb2496b81bc1a2e7c217923a7da02b38bcdd3faf7321ad3b2e605bcdd602801341e5eca2cf3a98cc2fc527436b835f36a7f2e04ae3d2f173461ffa8
SSDEEP 96:D09o0eQaIaEdm/tVHoHPhszF1UE/etCjnQRt/Hnjhq:D09orQaIaEdm/tVHoHpszfUE/etCjnoG
TLSH
T128C190F7C3F4993D8E6196F4AB156E2FCE190924532C3C2A89D85F1B93E2471E101A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 1ac0f941204bd7db38043aa5b5c2db3171fb6529fda71831b2f182aef0480615
MD5 d3ed9931acfdf377d48d37dcf32018dc
SHA1 a982704e7b7d92af6868e77af346041f869248d1
SHA512 b6d4547306ead071d5f17e7757ec5ad41bfa79c438e23387cc29300c1b263b87b7ff8c581319545f046794fdd211919a2ece2b840bcd20667f97d92749ffea47
SSDEEP 384:D09orkry4c2c59NJnJ8Inf9Me2aId/AoHpszfUE/etCjnfgZzKIGxAdmanEfyIhv:NrhpeF4N6cCS
TLSH
T1F872CFF7C3E4862DC95166F4AB153E2FCE1E0924522C3D2789E8EF5B93E2471E21164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a5cb83bdaacbab7cad8c09cc112a50aee6695d8bdacd0f40e57d726616215f3c
MD5 4303ad211a20a395b4f3fde26c4be3bf
SHA1 c159d6cbb038afaeee0de5a11c83890fad5c8a43
SHA512 f8063f94052f01723a6133bf02a082083da6194008835256c68156184836c5cba48117d731f2e034e645c0d10d114f15ab3f08b309b3eab0c573a6d0aa5be99b
SSDEEP 192:LR74L7d0fvv7hpAPRp25u95Hsb+WNnERrTz2s55kw0JHVyIsnAUge:LR72wn9UXlrwGL285Ahe
TLSH
T1C942E72EB914253B4CDAD229FD227B57D7F7142126E01E84EAFCCA6C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 7ccc0929293de91378b81b063444f14ec5a8cdaccae473a936afdccb29107634
MD5 50b5bc087aaaf455f0b798bc239a9a3c
SHA1 794cbe3649d065be9925d9162d37ba6a8f785261
SHA512 59f102514da1f5b72facd58cf9ac9de77f3c76aa5e70ce7f002e05f2a1b921c2711b5c9bb2b0a1dafe8999921d6a4920bce16bd9489083e01b225096a1f6bf93
SSDEEP 192:LR74L7d0fZv7hpAPRp25u95Hsb+WNnERrTz2s55kw0JHVyIsnAUge:LR72w59UXlrwGL285Ahe
TLSH
T17942E72EB914253B4CDAD229FD227B57D7F7142126A01E84EAFCCA6C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 c133e140ac136e74edcb511641032e3a608d9169068279fc7dee722a08e6d90c
MD5 f7086eae0d78a6768aa6c518407ab4b7
SHA1 c9d6605b9207013deb36e8618293afbfa756dc75
SHA512 94a10c44edd15478fde56dacbecb5bbf5359f2e4376f675bda618e27e0df4633421c01fff6de283f5a13206ae7adf44ceae3f9163256af424af805b8b1ab9c0c
SSDEEP 192:sRncBz4L64d0v1v7hpXPRpDkeaksM95Hsb+WNQYnIH2Tz+GF0tK2Z55kw0zHVyI4:sRnmz26xF95XfrwqaNr2D5UhE
TLSH
T13562F92EB810297B4DDAD225F912BB1BD3F7102165D11E84EAFCCA6C15EBACC6217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 58655b629b2bc2c6604e13f51009e6c79b465c0b6474f758fbc73cecb94b4a95
MD5 e9acf666fe22fbab76d257011f52ee6b
SHA1 e3ec6f798e08c36ce21692349658e1421b7b753c
SHA512 55b9768eec21e359e60c201b82401ac9f2e2b85b907f584ee7348a21de221577c0b9f2bd935ac5132321c0ac350c7f8c300c9a095cf88e3763fc7e4d4ee8143f
SSDEEP 192:sR74L64d0vJv7hpXPRpD5u95Hsb+WNnnIH2Tz23I55kw0zHVyIsnAUgE:sR726xJ95XQrwAa2w5UhE
TLSH
T1BE52E72EB914297B5CCAD629FD227B57D3F7102126E01E84E6FCCA6C15EB6CC221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ab7b4840cfee5edaf36c89af276b8c3e246255a749e16ca11decfb710b1c018a
MD5 9d21055bc8ea69be2f4715354ebaaf43
SHA1 2c14aec27bf44b021e5cef33a76328c2fef63135
SHA512 13cde99a93303fbfa3b7b3ca095b1486fe275dd76ee9965bc8a471af4193e018f45ae2bca44232e22279a4f0c68ae51106f2ee7152870ae2c779d843dca00682
SSDEEP 192:sRncBz4L64d0vJv7hpXPRpDkeaksM95Hsb+WNQYnIH2Tz+GF2S55kw0zHVyIsnAI:sRnmz26xJ95XfrwqaN2i5UhE
TLSH
T1F162F82EB910297B4DDBD225F912BB1BD3F7102166D01E84EAFCCA6C15EBACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 5604e617923107ac9e3ee9ca8c07dc32c58ef17e62135750ac31bd950f7f14d6
MD5 9eba2c1881b323fb61f7e8f6891c830a
SHA1 648b0030b832771fe56c2d448f588cc6f722cf49
SHA512 a1e3c28d74df71a6cf5485153563dd9e6fc6f9c3e058e2077b8553665feb21ccaf46adfb3ec58fb3bb63241855352955394f9ea8994cf75fa3d695403cbb0fe7
SSDEEP 192:sRncBz4L64d0vIv7hpXPRpDkeaksM95Hsb+WNQYnIH2Tz+GF0tK2Z55kw0zHVyI4:sRnmz26xU95XfrwqaNr2D5UhE
TLSH
T1D262F92EB810297B4DDBD225F922BB1BD3F7102165D11E84EAFCCA6C15EBACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
TLSH
T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 e641fb8bc919c6120264d31bf9b36afe7de6ccf505124204838aec49f234fd1d
MD5 a74c6a70b565e5604986c100f0e26a15
SHA1 faf94923d99a7186b7e513236318121a094da6c6
SHA512 3ecb9887c61bb08bdcd7362b192b2652dca9d59bf279e5ec0b17dc38d67f532fbd301063f6a56ea0b1c15c4b7cbd10820e759e41ef7880c18122a36baaa2ac4c
TLSH
T15BC01221CB05F521C85A43B6249398BCB2159F2CDE0E375D47F0A9269E351628024251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 959accf44fcecb37703e5902fdce2413928e1e9d3468bb6435dcb4264f2826fb
MD5 0d7b1dfdf8511de19232b28a8e90ba35
SHA1 c021b748c8e2df594cceba11a4a5ac20dc677057
SHA512 7cdc1a0b84baaf976ef1d6efeef4d5926660e5922df3ad476d6209d343783c37a526b958eff39e84c04a6f19b673cc5db2a79f1337022ca9a49aa00eec7c58d1
TLSH
T15FB0128284019151C81242F41142288C76149F20D60A370183E479638C25160C1180D0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5890c2.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5890c2.TMP
Size 96B
SHA256 469eae5cd2078d8c747dc37be732c4bae3ead6765132a1f2ac285954ba9f5403
MD5 1fe605b4916780b7f5f05312475bc238
SHA1 64f8f95f859f076f7d3ce3561bfa9bd98108563b
SHA512 b2efa279da5e436d0624b9c8c7d1ff940fe5e88759acbc1e67b5fb782d6da7d99fab68da5e3fec4c77a617a99e445672684d5832d616d3c84eb609a6e96cef91
TLSH
T15CB022B0C003A202C00303B038F2C0CC3020CF3AC30B2202A3E00A22CC2CA200220C20
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 10c10473176e41681cdf8f495fb02952f49e8daf815c2c7e4e9367cd9b160bd5
MD5 93ee0bdf24f5e4162e44aa8c618b6140
SHA1 b7cefb86d91aa0fe95e29d03682b78b48b4cb192
SHA512 0a87a4b5ee1a1dd895e508126168cf5f19859737107899ca28cea3979343df7f2d8b606d30b5de69b2b27e4c96011d16472ab581376e3fb868618271502bfac9
TLSH
T119B022A03880CEA3CF0C03F000CC8800B2303C082EC3882BA0F80880EC8332003BB8C0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 71fb202afd4bc5e7b9c64093f5eea976451cc228cfe948d50c6a156408ea92bf
MD5 a5e725b657b672249756d9ae9d57dc6d
SHA1 a370734485aa7e7997b73708a6a98d8f066e93ba
SHA512 972be7a77a5653b9d09288af1514ca1380a6190e2329718eee6fac03e8003ba762532af57c04d0aba9862596bd2a9429479059d14582d47399a22ff80a493b1b
SSDEEP 1536:6nyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:4qfd7NtZL8cHQRZEQ6Sps9
TLSH
T178C30237EBC21F335D82CB64BA534FDA97B644A99030D301AABD3BFB6C93491644249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c031645d835fbda72584be2c1ebe5f06b0624aaac6b8d16a36d00dd5a34aa57e
MD5 d4a913cab4df8483c72c29444241a005
SHA1 68583bfe55e821c87b4b86c61663e9738602c592
SHA512 44e5cf0752c78553a532003a744453884c5dc84edd5a5b5c57f32273d1d756d0b2799650e92689478b4a868d090b77971153ada80b38ce3d5a8af015d5006ba3
SSDEEP 1536:05gyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:Siqfd7NtZL8cHQRZEQ6Sps9
TLSH
T122C30237ABC21E335ED2DB70B9130FD797B644A99034D301ABBD2BFB6883455658286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cd5e9817af9f3423fc0097c4f175d8884f6c2a0217d6d4102c8f4b01df05a20a
MD5 19a22b66f5a98544eb2d3fa46ac5c439
SHA1 27da47da58347e137de858aefa367368eba4566e
SHA512 3b075db88f36f4d09f743e538688ab0ea7cce8f6da8e2463273693b7a35fb9c92f829941c314c6422516305ac2a061e93861da089ee53179c3db590586a6fd97
SSDEEP 1536:B5gyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:viqfd7NtZL8cHQRZEQ6Sps9
TLSH
T191C30237ABC21E335ED2DB70B9130FD797B644A99034D301ABBD2BFB6883455658286C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 51467e807f33bccaecd9f6fcd347c620119af92ea344f3eda4fba622d5eea90a
MD5 576a44db9e2caea29bb6c171aaaa666a
SHA1 c0e1ecdf05d9ace05e430c684b923a816a8d07af
SHA512 16b87ce2a9127a7963d0fb4cc3dbbeaee73874968e5d965954fb86bf97aaed81fcf004a4119ed00fc4c7002a823df4c74e027657de6a3670785f8a7e33a9e6af
SSDEEP 1536:BKjyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:wNqfd7NtZL8cHQRZEQ6Sps9
TLSH
T12FC30237EFC21E335DD2DB64BA130FD693B644999034D301EABD6BFB6893451A48285C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download