hxxps://exemplo2[.]com/tickets

Analysis

user interaction
yes
max time kernel
299s
max time network
279s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 00:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://exemplo2.com/tickets
Sample260804-a855lszfng

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2996	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302784576321789"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
1864	chrome.exe
1864	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 33 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe
Token: SeShutdownPrivilege	3212	chrome.exe
Token: SeCreatePagefilePrivilege	3212	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe
3212	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3212 wrote to memory of 1360	3212	chrome.exe	84
PID 3212 wrote to memory of 3060	3212	chrome.exe	85
PID 3212 wrote to memory of 3060	3212	chrome.exe	85
PID 3212 wrote to memory of 2996	3212	chrome.exe	86
PID 3212 wrote to memory of 4044	3212	chrome.exe	87
PID 3212 wrote to memory of 4044	3212	chrome.exe	87
PID 3212 wrote to memory of 4008	3212	chrome.exe	89
PID 3212 wrote to memory of 4368	3212	chrome.exe	90
PID 3212 wrote to memory of 4008	3212	chrome.exe	89
PID 3212 wrote to memory of 4368	3212	chrome.exe	90
PID 3212 wrote to memory of 3084	3212	chrome.exe	91
PID 3212 wrote to memory of 3084	3212	chrome.exe	91
PID 3212 wrote to memory of 4180	3212	chrome.exe	92
PID 3212 wrote to memory of 2496	3212	chrome.exe	95
PID 3212 wrote to memory of 2496	3212	chrome.exe	95
PID 3212 wrote to memory of 848	3212	chrome.exe	96
PID 3212 wrote to memory of 848	3212	chrome.exe	96
PID 3212 wrote to memory of 2836	3212	chrome.exe	100
PID 3212 wrote to memory of 2836	3212	chrome.exe	100
PID 3212 wrote to memory of 4788	3212	chrome.exe	104
PID 3212 wrote to memory of 928	3212	chrome.exe	105
PID 3212 wrote to memory of 5044	3212	chrome.exe	106
PID 3212 wrote to memory of 1768	3212	chrome.exe	110
PID 3212 wrote to memory of 1768	3212	chrome.exe	110
PID 3212 wrote to memory of 1084	3212	chrome.exe	111
PID 3212 wrote to memory of 1084	3212	chrome.exe	111
PID 3212 wrote to memory of 4360	3212	chrome.exe	112
PID 3212 wrote to memory of 4360	3212	chrome.exe	112
PID 3212 wrote to memory of 2140	3212	chrome.exe	114
PID 3212 wrote to memory of 2140	3212	chrome.exe	114
PID 3212 wrote to memory of 4468	3212	chrome.exe	115
PID 3212 wrote to memory of 4468	3212	chrome.exe	115
PID 3212 wrote to memory of 2976	3212	chrome.exe	117
PID 3212 wrote to memory of 2976	3212	chrome.exe	117
PID 3212 wrote to memory of 2640	3212	chrome.exe	118
PID 3212 wrote to memory of 2640	3212	chrome.exe	118
PID 3212 wrote to memory of 2432	3212	chrome.exe	119
PID 3212 wrote to memory of 2432	3212	chrome.exe	119
PID 3212 wrote to memory of 4108	3212	chrome.exe	120
PID 3212 wrote to memory of 4108	3212	chrome.exe	120
PID 3212 wrote to memory of 5008	3212	chrome.exe	121
PID 3212 wrote to memory of 5008	3212	chrome.exe	121
PID 3212 wrote to memory of 2012	3212	chrome.exe	122
PID 3212 wrote to memory of 2012	3212	chrome.exe	122
PID 3212 wrote to memory of 3872	3212	chrome.exe	123
PID 3212 wrote to memory of 3872	3212	chrome.exe	123
PID 3212 wrote to memory of 1028	3212	chrome.exe	124
PID 3212 wrote to memory of 1028	3212	chrome.exe	124
PID 3212 wrote to memory of 4348	3212	chrome.exe	125
PID 3212 wrote to memory of 4348	3212	chrome.exe	125
PID 3212 wrote to memory of 4764	3212	chrome.exe	126
PID 3212 wrote to memory of 4764	3212	chrome.exe	126
PID 3212 wrote to memory of 1864	3212	chrome.exe	127
PID 3212 wrote to memory of 2776	3212	chrome.exe	128
PID 3212 wrote to memory of 2776	3212	chrome.exe	128
PID 3212 wrote to memory of 384	3212	chrome.exe	129
PID 3212 wrote to memory of 384	3212	chrome.exe	129
PID 3212 wrote to memory of 4164	3212	chrome.exe	130
PID 3212 wrote to memory of 4164	3212	chrome.exe	130
PID 3212 wrote to memory of 512	3212	chrome.exe	131
PID 3212 wrote to memory of 512	3212	chrome.exe	131
PID 3212 wrote to memory of 2104	3212	chrome.exe	132
PID 3212 wrote to memory of 2104	3212	chrome.exe	132
PID 3212 wrote to memory of 3580	3212	chrome.exe	133

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://exemplo2.com/tickets
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff87ddbc728,0x7ff87ddbc734,0x7ff87ddbc740
  2⤵
  PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1660,i,2712063757817483383,5198743231952882625,262144 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,5058908398148625148,5264888114700343608,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2352,i,8754630964349495859,15334755033916259504,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3244,i,8709737667560506695,1140757036824811297,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,13122608324159803128,5288683878523345086,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,11125683307377954993,1694453159113578840,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4416 /prefetch:2
  2⤵
  PID:3084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,14964183295453201146,1284453372119520137,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5608,i,10415284841893719260,4003345659937609069,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3300,i,14550252436609120654,13006945469984743348,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5616,i,696747943713435782,2167153744993981697,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5716,i,697581047646192802,16309430256672270296,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5404,i,9811346033115585624,4461717256695912770,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3260,i,14030100868805860898,17285114572468587025,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3460,i,4427329073927979025,4947862969645192568,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5792,i,279856566638415398,18349007714248728634,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:1084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4460,i,14031639051989442933,16974093045164448441,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5792,i,14350082854773932294,9383377306024926509,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4504,i,8093540054213242759,6493194277042409075,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3460,i,8492349209692742902,17108010601341482406,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=4516,i,16113016483285925912,5903074198074909399,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=728 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5728,i,5584941989314681354,10226786228839419915,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4436,i,15791232521109377787,7216044526004517036,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5296,i,4198393579144311876,818083715550201066,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5248,i,13678760413348033292,7825754320638742120,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6060,i,3225806067075945339,18316760630791209729,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=5640,i,13847118977186650533,10649927082173575167,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=1004,i,16996362939081328362,4229097863879676979,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=5868,i,17932523882643973960,2800458709706891225,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6028,i,17353079348616667380,4598612664301999575,262144 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6028,i,7652312485426381078,9619015785205541405,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=5928,i,6903787522760670278,444963513390058771,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6068,i,1814175749508101232,479991608072950406,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=5816,i,7768339716560388740,5090323731210476391,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=5740,i,18292960785339777752,8328876916458406720,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=5884,i,14780718138926183503,17344199933853500340,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1152 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5740,i,13870820754943010128,16704298044607955997,524288 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5664,i,17459154849301554224,13953564833476412897,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=5856,i,3949934554061470565,11928377808533796479,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=6076,i,7932096237587816379,9824300100318214002,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=5976,i,13835652196349466846,4288888902323840889,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5712 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=5824,i,10744891947754554873,17496173397374007849,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=5976,i,3596210913490619999,9691025209814859688,2097152 --field-trial-handle=1984,i,233669352136254467,14830721721850640445,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:2572

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:552

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 3c021149223a234afcc13352b420867d11dcccb552084fa0b74c34ae3e00e7b9
MD5 a641537dc08506c305249f88283df27c
SHA1 d31c7652aef9c33dc1ec43d75464eb7a42bc38ce
SHA512 a7f608b8963312883a8034f67654662646fb4cf3ee34e214ee554476833dae07c706d926775e88d18f25124a2ddebf6cacc92052c8ef2e5a701fc282bf67bd33
TLSH
T17CE022A9CD62AC3B19FC2728A8B55745EA41631B36409C1F373D900C8FB4B7A858AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 fcd2549ce054f84dab9ea2b4ca1dd99c43aec90da935eb801492119e66debfdc
MD5 bcbdc3d6ce829f2f476f9eeae0d4cb00
SHA1 66d68e08e20b1af8f93af5379a9a95108c605e15
SHA512 cf04b4156085ea55ae10e3ec1ecc144d4294e7acda24a6e5a5e21bfb7b45cca3f4723a719def82966e7e0eae8665e758ff3402735c5ea016052c03670b577485
TLSH
T16D419BF793B4857E8A1192E4EA156E2FCE6D0524032C3CA688D46E1B87F2972D10478F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0a46d4afa269c382b9a343ca219a16f50ae10e7c150000d7c91afa6146e9ebef
MD5 5621a22ba7e9aaff9f219c2b2ffd61e1
SHA1 96c88fa52c8ebf05c93e93dfde6b43170b2e413a
SHA512 f5a7b4adafa26b2472e4a92ba6fd61f91d240ec21ce1d3c0efb5ba6565b322c5603b438309951df68bb933aa0b2fcc55b5b5303e57d1af26e23d7950b7781d07
SSDEEP 192:FRP372sV3FSDJ+Fv7MF+pAPRp2S9HHsb+WNnv2P3EeF9r2DGwFVyIsnAUge:FRP3ysV3o1+1goUX91wOPH9r2Dnze
TLSH
T19142B56EEE11697B6CCAC229FD227B53D7F5102631D11E80EAFD892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 622acb9c48e5edc82c1df2484c8a992fac9a4c254de2b905a1c1f2883907f967
MD5 854d9e5007a024cb1bead13cea61c74c
SHA1 7a25c76fd854dae961e8cdc392c0f725748dc1d7
SHA512 a2dcf3cd3e3012e4a65415a06e9a5631a673883cdb97b4a720993483d86b21bde3280fde4a8478a52908b845995532ae3dc150b0db94883700a17cc97563d22b
SSDEEP 192:FRP372sV3FSDJHAv7MF+pbUPRpovwmQ9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAUgE:FRP3ysV3o1HcgowXb1wOPL9r2DdzE
TLSH
T17A52C76AEE11697B6CCBC219FD227B53E7F1103621D11E84EAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 571e75d17ea5abfa7f10945b64f35bda2452e79bd5d37dbfc62e87b62dbc9b7f
MD5 affad80519cdd5f2c4173539122236cc
SHA1 04e908726bcdcf99af7a396c313f9eaf23d4b5d6
SHA512 d63ef9191e439038f698bd787a32bae32800b4c4ebffcd01170a660485b58fa5848f97bd1e04d187560f984169343b508449a277e6c65184d26afcc8f17114ec
SSDEEP 192:FRP372sV3FSDJrgv7MF+pbUPRpovwm0Jd9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o1r8gowXZ1wOPL9r2DdzE
TLSH
T16F52C76AEE10697B6CCBD219F9227B53E7F1103621D11E84FAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1b102e87afb96b7383201d92adee8e3c61c43cb1b85ee53f250c7122569b4029
MD5 7e159f7427e4217bbfba36bc6b76d714
SHA1 4060751c0c52b2cc1bbd0cb0419086bc75aff58c
SHA512 42c19224bcec883cafe60c89ca0fecd9c6cb99b2264df3175bdfa9a446d2418218d578a2b2caf5688d167113c70cae4511409c1ffa1368f6f4a59810a5b619ec
SSDEEP 192:FRP372sV3FSDJR8v7MF+pbUPRpovwm0Y9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAU3:FRP3ysV3o1RogowX21wOPL9r2DdzE
TLSH
T18152C76AEE50697B6CCBC219FD227B53E7F1103621D11E84EAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b25c7b3acaa9c65d7ab174c415faf5a48018aa16991d860be4f121f06d9eeb39
MD5 b28ed861dadb28ff8f863c56aedef40c
SHA1 e323519c8d0a7c1fa96706286547d39ef61ff572
SHA512 840a0ae26c3fc6d84925e07f298ed702b6badc9baf4f302c3b2d91628bbc16819dc22804a98028e6517911746f4081da0bc12f4f176df7cc1f816925a47a3009
SSDEEP 192:FRP372sV3FSDJb4v7MF+pbUPRpovwm0rd9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o1bkgowXz1wOPL9r2DdzE
TLSH
T17F52C76AEE50697B6CCBD219F9227B53E7F1103621D11E84F6FC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 23891ca3162f27e0db774dcb05e08c7dadd87155ad4bdb1499e1a101bea9d477
MD5 59e0153072e9e4955c604a40493fc135
SHA1 f6116d10cbcefab94d3990a457f25bb3a263982f
SHA512 7f9a032a1d22099eb89cca2a7db80bf06820494a58deb072b38671afa5981a04c40dff6eeea7edc9a2109c285cd3242b4bf89f098b2724ccc9bf13face54d1ce
SSDEEP 192:FRP372sV3FSDJubv7MF+pbUPRpovpJ9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAUgE:FRP3ysV3o1ujgowX+1wOPL9r2DdzE
TLSH
T11B52C76EEE11697B6CCAD219FD227B53E7F5103221D11E84EAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b9237faa803caaa203ac1e81b768bafaa9ae65a99217fc5e7dc1eb3e88a494e8
MD5 8b2726145a74e282b134024503f4c430
SHA1 937d90fc39ff3a2dace0334336a4dac38b79068e
SHA512 c3aa1c22daf29f576dbf6384eb086a5c155b3f07d80f3d56af74b0c8f043e491f21eefcde34c3970c6390d95a02eeac2fd3daee5b3a62dace955589763637d9b
SSDEEP 192:FRP372sV3FSDJ+gv7MF+pbUPRpovwm0Jd9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o1+8gowXZ1wOPL9r2DdzE
TLSH
T1DC52C76AEE50697B6CCBD219F9227B53E7F1103621D11E84FAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5f3012aa886bc7e82dcbd4a7a6057c422dc5f7f50e9279a764f15af6c084a859
MD5 6e2a9108feb92a7481929a87108bea85
SHA1 02c8c3d6913163085f3eb53f6dc8021127a5bd6d
SHA512 b589d91b5118cb288a6d236a62006b0d3a8cd56bdc7cfe39b8011abd91b72fcef318742bcbc3b0142c7cb80ab28e5aeda6e36182dffce9e9b0639c63c01a42d9
SSDEEP 192:FRP372sV3FSDJg1v7MF+pbUPRpovwm0rd9HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o1gFgowXz1wOPL9r2DdzE
TLSH
T16952C76AEE50697B6CCBD219F9227B53E7F1103621D11E84FAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a6b3866c0060bd02df4e4eaf0699220d70add20fd873406b0cd079f6b43b259b
MD5 daad5be867c8e7d91e861910c1b3e6fd
SHA1 875cdbdf97fcd2e11658efb8da3e4568dd28d80b
SHA512 880c2922619f2c35b8acc2fa049b880d2e71d96aaeef1ff18fe0d315457af0244b7cbf6922afa792f2796d5c09dbf3e06bdce3342d4cbb3d465d406e8d2c306c
SSDEEP 192:FRP372sV3FSDJd2v7MF+pbUPRpovwm0J19HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o1dCgowXx1wOPL9r2DdzE
TLSH
T13352C76AEE50697B6CCBD219F9227B53E7F1103621D11E84FAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 265c3a6c9363291b34928c5ecf9fd753b25c463b4f97b1f2dd05b5bd110c814f
MD5 833978c9e656cf3f28fe8171d9bd3c50
SHA1 a7e6b9145bae8b6c1c406c692956d11a73fbe663
SHA512 d2e69c0014b7eb54b603d6aef759ed955f5306473debb8203a6a4cf48066d44d6a14643d1ee64319dacf43ef55e86533b0a27a8bb0115c63da457618b5b829a3
SSDEEP 192:FRP372sV3FSDJygv7MF+pbUPRpovwm0J19HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o1y8gowXx1wOPL9r2DdzE
TLSH
T1AA52C86AEE50697B6CCBD219F9227B53E7F1103621D11E84FAFC892C15E7ACC221711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 51119812c47d5cbf5a5fc0d907e7faa8970a9cbdacf1885516d0058237c05a82
MD5 4b8daa7b0479d950a131c55a89c5d2c8
SHA1 cf626ce4e5b42979e21c174e914f2366c92deac3
SHA512 8ce6a54d8e044dc4fd491496e5f5f131e5f2cb4ae4a809d5a883e637e66bae2ad39e91db22b45f796d4dbdf6a79c75a128ce197aab7c1b80781466c59c113151
SSDEEP 192:FRP372sV3FSDJ88v7MF+pbUPRpovwm0J09HHsb+WNnv2PSgEeF9r2DG4FVyIsnAI:FRP3ysV3o18ogowXo1wOPL9r2DdzE
TLSH
T16452C76AEE50697B6CCBD229F9227B53E7F1103621D11E84EAFC892C15E7ACC2217117
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 b794c18817a978c69eee768f198ce78fa03ddcfb98568cd0e70a870d5a677a3b
MD5 5245d2a3a5ea383856905bc25e825179
SHA1 4d4f073acc3f2d04652023f2728d79cf9d56618f
SHA512 8934bbf163bc5e745522bc9375a949848be3d274a5f381d92224367c8f9f5c7fef72c0732309e84767255ec97007e49af231996dea115e68c48a3151485b505d
TLSH
T174B01240C0425941D04306B021471488711C5F21960A170143E069A2CC371B28014090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586220.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586220.TMP
Size 96B
SHA256 87bc469795316679d8d5edb323a50e8e483a4a3dc0333ddcdc892bbc0eea7ccf
MD5 bf2b3c1c5ba1bf70b17608258d907c39
SHA1 bd5bcff399af19155c5f46b2fe7474cd83cd2661
SHA512 9cdec1e40a09bb0f559f96b05399ade50b884cee389e7eed2df8170b7b9ae9e058383283cde871cad53c93b38e3e4413e65ceb4cb27a9366b106474d58dc6d3d
TLSH
T1ACB0222EC2032E03C08203B0208BA0C83020CF20C303222AC3EC0A32CE2C3B082300A0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 bca40a048ff136706e07406726d2a87d72b18c7468af8cc45f2f0fcff21af037
MD5 d8be3057b01e88860ead2dd2ed905daf
SHA1 cc0ec706790db8d1244ee805fc383be0186b3e04
SHA512 a63b79933870e654d1aa7b61b4956cd2d0dbc42a2fbd0eb3323620e8073789aad5785e49be9a7bfe72a17a2f997abd51c6eafec2772bd86a4c7d48ae25061acd
SSDEEP 3072:GkGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:GHm7Rkm1tYpBeh2BAoM
TLSH
T192C3023B5D75A93758B9BB1EB08E0B1F1EF14AA7C930DA92C8D85A0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 3f093b95c998770fd8154a79df3db0f95e56da59568cf716fe95b4cf00c5e4b9
MD5 96f50f8f3d30fbd3862c58af26d2559b
SHA1 4bc4136951e6df9db458c0a1cd1607e8a5f7cc56
SHA512 fd0c49af059ac5f7c148e7ea6412ecaa7f31bccc07304a488c3c885e657bd7eb801ff6992d928e880a9c56042feca3b71b6a26208af4a9c66cb41f04852b9860
SSDEEP 3072:TXIGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:TTm7Rkm1tYpBeh2BAoM
TLSH
T128C3022B5D75A93759B9B71EB08E0B1F1EF149A6C820DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 80cd779f273322ccab9b44e3a572dd93ab39fed05b6b4e043c20c05b2ba8d30e
MD5 2d8ba7ceddd1c68810122512a0f2987c
SHA1 09d7f1f3e312873a6d1aed8287643562195ee56f
SHA512 fd9443b8d88c5d8c2b054f8863e3ae6c5ab0cdfca27864782b33d32f699e02a4a54a36609f7145a9a43c4e4af40e759377a21aa6db686ad15b0ce558086a6f9f
SSDEEP 3072:/XGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/Wm7Rkm1tYpBeh2BAoM
TLSH
T1D1C312275E75E9375879BB0EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 8ed4ea3846a27860c118c6636f326731fb76534a543ed8d86e93b64e110eeb84
MD5 d6ba2f34534fa35784b30e9500a19930
SHA1 8a75d767329d3d60bfbd65b13903b05c0cf96195
SHA512 0f89fb23f8e0cf3055d4252a370b7537cb67a0175d00ef1f3cfc5d30526568f0c323042b13e7a8467f5930d30a342bb3ac3762d555b957acb32b5221678a3dbc
SSDEEP 3072:GXIGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:GTm7Rkm1tYpBeh2BAoM
TLSH
T13DC3122B5D75AD3758B9B71EB08E0B1F1EF149A7C824DA92C8D85B0423FA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 54800b6b9ad40f6f4defc389fb47d5cd1d4c64e5a8f6c425f6a42b2a19265b77
MD5 179862b8078e80d8769effe127114965
SHA1 40d7775c10e74a18ee899eb8c6b1241a8d8ecca9
SHA512 cd12901fa3b45d133c3f93ee3b6e7ef81915988ec963a29bb0a82c073953ab6a353bfe24cf0abf72f23db693abcb3d5a60a539e207e8b7ad08fe5cdf12938f8b
SSDEEP 3072:WkGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:WHm7Rkm1tYpBeh2BAoM
TLSH
T161C3023B5D75A93758B9BB1EB08E0B1F1EF14AA7C930DE92C8D85A0423F97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download