8200f6e389deca0443197792688524eb90cef3e8a114ebe6857f2cc29c56ba42

Analysis

user interaction
yes
max time kernel
1050s
max time network
1019s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 08:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Screenshot 2026-08-05 102831.png
Size 438KB
Sample260805-j2selscn21
SHA256 8200f6e389deca0443197792688524eb90cef3e8a114ebe6857f2cc29c56ba42
MD5 873b712509e4752cbc858749c523f3b5
SHA1 d1eb97e1753a9934c0a70b4512bb5f3c9c9ca6c2
SHA512 dc8def53c1fd76643c5544276d540d6533a4bde452a99653e35b9e923188b6aa2ef8a31c0e75cec7df0b3e4800de38a233c0a5c147ad2da0cacbb4f4c618cea6
SSDEEP 12288:1NddD5HXI6mmrzVo7/ddOB59by/DrIi4pbLHu1Z/4p1Ez3ry1:1tDl46mmXGrddOdby/DrIXpniZ/43Qro
TLSH
T11FA423EDCEB876C3F7A84637921C1D29499554B5F21B44F8CE2CA2CBD9781A207F508E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3488	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303911151938314"	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5228	mspaint.exe
5228	mspaint.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
3940	chrome.exe
3940	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe
Token: SeShutdownPrivilege	956	chrome.exe
Token: SeCreatePagefilePrivilege	956	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe
956	chrome.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
5228	mspaint.exe
5228	mspaint.exe
5228	mspaint.exe
5228	mspaint.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 2128	956	chrome.exe	100
PID 3728 wrote to memory of 6004	3728	chrome.exe	101
PID 956 wrote to memory of 3488	956	chrome.exe	102
PID 956 wrote to memory of 5604	956	chrome.exe	103
PID 956 wrote to memory of 5604	956	chrome.exe	103
PID 956 wrote to memory of 4512	956	chrome.exe	104
PID 956 wrote to memory of 4512	956	chrome.exe	104
PID 956 wrote to memory of 1728	956	chrome.exe	105
PID 956 wrote to memory of 6020	956	chrome.exe	106
PID 956 wrote to memory of 1728	956	chrome.exe	105
PID 956 wrote to memory of 6020	956	chrome.exe	106
PID 956 wrote to memory of 4232	956	chrome.exe	108
PID 956 wrote to memory of 4232	956	chrome.exe	108
PID 956 wrote to memory of 876	956	chrome.exe	109
PID 956 wrote to memory of 876	956	chrome.exe	109
PID 956 wrote to memory of 1064	956	chrome.exe	110
PID 956 wrote to memory of 4176	956	chrome.exe	112
PID 956 wrote to memory of 4176	956	chrome.exe	112
PID 956 wrote to memory of 2000	956	chrome.exe	113
PID 956 wrote to memory of 4640	956	chrome.exe	114
PID 956 wrote to memory of 5128	956	chrome.exe	115
PID 956 wrote to memory of 4524	956	chrome.exe	116
PID 956 wrote to memory of 4524	956	chrome.exe	116
PID 956 wrote to memory of 2828	956	chrome.exe	118
PID 956 wrote to memory of 2828	956	chrome.exe	118
PID 956 wrote to memory of 3512	956	chrome.exe	119
PID 956 wrote to memory of 3512	956	chrome.exe	119
PID 956 wrote to memory of 5308	956	chrome.exe	120
PID 956 wrote to memory of 5308	956	chrome.exe	120
PID 956 wrote to memory of 2436	956	chrome.exe	121
PID 956 wrote to memory of 5816	956	chrome.exe	122
PID 956 wrote to memory of 4724	956	chrome.exe	123
PID 956 wrote to memory of 3408	956	chrome.exe	124
PID 956 wrote to memory of 3940	956	chrome.exe	125
PID 956 wrote to memory of 2120	956	chrome.exe	126
PID 956 wrote to memory of 2120	956	chrome.exe	126

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2026-08-05 102831.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5228

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:4532

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x114,0x118,0x11c,0xf0,0x120,0x7ffc44adc728,0x7ffc44adc734,0x7ffc44adc740
  2⤵
  PID:2128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1612,i,17116949013868736057,3888953460186929499,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,10253531740015966819,3160999966606910493,262144 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,7146946939673884710,10016476953303177950,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3244,i,8748716674226717502,12068557975661377970,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3216,i,8702410031946517800,4541043055340827245,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:6020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,3372892845690577067,12661963823138335142,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4500 /prefetch:2
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,15233894249726069418,1935994277436377815,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,441996856598758937,4261426925283846263,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5944,i,13832732640998523975,16353484439157867046,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6084,i,5259695490061381169,15013634999588480602,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6128,i,16707550670339993762,1960656237185328691,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,14005478267393362516,16327431785840366131,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:5128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5648,i,7039706406944999960,14496717352050162970,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6088,i,13539150103787605429,3464578878949339360,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5980,i,8303117757657606552,7128196470702158842,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6148,i,882894140127214843,13426968535612228463,2097152 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6480,i,16512038328983083609,14262752934483050754,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6484 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6676,i,13418214647886705804,8791225026394851901,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6532 /prefetch:8
  2⤵
  PID:5816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6520,i,10817257277039903507,10994992329084227061,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1144 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1144,i,6866302540757309485,12920738630251172946,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6704 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6660,i,17276802072760259416,1803513656514717807,262144 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6520 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6668,i,345289717508947405,15571379466249710248,524288 --field-trial-handle=2096,i,11244869695765115433,13197633776043310043,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1280 /prefetch:8
  2⤵
  PID:2120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc44adc728,0x7ffc44adc734,0x7ffc44adc740
  2⤵
  PID:6004

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Size 40B
SHA256 934e8a2dd0b8fc2347eea4a5fcd1e0271ad9d5a2afa5dffa8aef017283231eb4
MD5 f0d9cdb92f2136d897525d63ed1a375f
SHA1 ef4e84f76ab149db1d7def9088d5e039eac018fe
SHA512 df19c50bb58e85cdd1b10d5ef14c6e5b0a2d4cb19e1a0fa5c4162ed9647256cdf4b62690daf9898df15c607728b24f1f1b75426cd85f7748ba211368898599ce
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 a782ed32cd236b56988e30ff464c080e61848383567b432dd720b7daf8e46ba0
MD5 66c36eae6b7bb5628bea15485643888d
SHA1 efbe4d1f6587f38dc4b80d52ab057335fb05c8f1
SHA512 df8b940588362578eb4fe81dfbe3e2f1cfa203ce070323a1520fa28a1eca769a60ecc349b75357f4e945babfa2d0289e11ae841d8560480210a68eefa2a4a28d
TLSH
T135E02375C620BD2B18FD07185454064FE65523572740457B393DE60D8F755360945C1C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 768KB
SHA256 5fd5f94af73969a00d0092a267a9b4735b1584c8ad4501bec829e41e7e81cbea
MD5 893e89b8b9874bd5502fe338523d9c8c
SHA1 5b87f806db8f3bb6ec286df5a4c0f3e8912ba1e3
SHA512 23e478d0e8ff28d1b4ec002969b0bb848249ea58e48571926236838be827574fa3e405b3ec0d779dff98b6e1d3cb6d263602ed9c5cb37d20cc2437d5fc79a9cd
SSDEEP 24576:urMRuXsQ+k26Kq5KkErkcG7LYdDFRtGVEj:1RvQJ26KcH5cGyvWEj
TLSH
T164F433E05EB0D168EE6C4C56116FA31D3EBA150F6BB1AF38DD3DB653913E8D01645E80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 0efbb39a3cf3feb1fd81566b3df6409fa6719fd798ae7df494140daf8f0b7c5b
MD5 13049cdf24166b1172bdfb99bf15cf23
SHA1 683a5f14b2abc6098159f95efb6b3a8c23305297
SHA512 607ecc4c24985ed69820111a568ec6a05839540582681de163fd39045126004e5b4a3253c6e7a9be1d4bd62c730c0f194822501d4ba434ac52843de5db92c64a
TLSH
T14C11AB2815CF8062DFEAE8B16AE7CF6B20520A188D75D31342319255A32B7A5C8F9127
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 1KB
SHA256 93648652991e11dc4011cce20f9355f051fc0576a6d8bd9d42b06eedd7264fd2
MD5 535251c560147901c9f65ed6209cb019
SHA1 1e9a7a5d56a0e9d5bd6868579cf62429ed189c68
SHA512 37a2a89de1cbda8b40d103e95f8c7b885d4d2df7427c854e1d27a950c8d0f382115ee9caf84952231388a0a1e2bdbb3ba2a20d11f96b86cfe9123febc4486065
TLSH
T12421BA2426CF8456CFBAD4742AE7CF5B20961A18AD74E31303718225932A7B5C8FE163
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 c93e84baef6a8c79465f660c21b42c9b5a62f7e4e35d35a0b397490923dad486
MD5 06693d105823ab30bcbed473dd90b7c6
SHA1 715326b06aebb29c71513acb519b567c5cb159b0
SHA512 88c49d955fe81dd242392f8c018b11465a28d5231c0bf0a2627a3c99e7e2d5879cbc8ecd180037077c502f5a25e3dcafe373f4b8fd2def2908305fe15bc63419
TLSH
T13111AB2811CF8052DFEAE8B16AE7CF6F30520A188D75E31342319355932B7A5C8FD127
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 960B
SHA256 4e5225b8256d3861ad926891646304ad0d02fa2f99da51af216dd5ca17722a85
MD5 c0f3b9746a02bb2abf94bdc0dcc3d82f
SHA1 fe8f9fafb56a7e844dcdd48c364469d18efdc400
SHA512 dc8eb9cf315b320329c03ea62a3e4a9b0d4fa85cb81d26ae7e8b456c52dfac2af55e28fe083d2a3ba766b4e816c8331166b4cbd542d2debe5c8d93f0ce0d39a2
TLSH
T1ED11683915CF8052DFB9E8B1AAA7CF4710520B588D71D3130331A155631A669C8F912A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 48cc4212db1008c87745865aad5846099fadb165f93e662d7dcbf78aba638398
MD5 a5f6f2a45172dfa2d950daabd8e871d6
SHA1 d2279d21ec51aee31ebdb1fa961a371ae830f427
SHA512 977e7c29819e007d39d3686124e00fa9c17b76fbd6d77f3f73c32459a993bcf46dae571f75c931ba4c937edcfed79cf58a3b12ba695477df9254ced5397d7322
TLSH
T1D7219C3515CB8446CFF6D4752AE7CF5B60520A288E34D31342319215936F7B9C9FE163
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 9bec36d9e58cb0655cc4f5ca65befeaad5429b2f904965a16cc07200f2d58783
MD5 7f0148b098be7c598e7d75af6051c32e
SHA1 cf6389702963c42cb2d6e9f27cadc30f858b2cf5
SHA512 7851615f698118c87150dccbdfd3401eb70b99e6eaab879483746285f76a13c30b1fbc506f541ff7a142e26610e9b0ea286f053d6f5ae1477c2ba37804d9ddca
SSDEEP 192:DfWDaVMRJ0JtBrUaILQGIpEN5TVlI+I0ICaPKvrfPtNPr+B/0Nr22M:DfWDaVMRJ0JtBrUaILQGIpEN5TVlI+I/
TLSH
T17A12BEF7D3D8862D885156F4DB256F1FCE2D0A28432C3D2AC8D8EE4B93E18B1D25564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 e12e0796a6066080ff8ba723a847bc6ddafeba31145d72e8159e1f53c0ec4217
MD5 8c35aef20026c21e1f49f938636d6bd3
SHA1 ec3bfee15431bd4257b3e50517f7551d2395c82d
SHA512 775705a98599aaa0aeb03dfe2acfb04232cb539ac959b98b71e5507deda4992c8b41a74347b940c985850fef3170223ed66f77eca610a8dcb8bc07b524539d25
SSDEEP 384:DfWDaVMRJ0JtBrIRDkDwAaIYGIpEN5TVlI+I0ICaCDfFND+B/Uwvhaq4HE57dZ/X:mqmBPRC/+
TLSH
T14042CFF7D3D9862D885156F4DB256F1BCE2D0A28432C3D2AC9D4EF4B93E2871D241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 c169d128b04fed35ba811ac739916c6911d4a7be1b99db60df1bce7cdc176cc2
MD5 aec8cbe789e1130589240858adf89adb
SHA1 0510bba633fd539873a493d7fb236f44134a07a5
SHA512 4fa172d6846ae8be9c6cdf190566fbab7940ca9973e3aa6b2bdbf25a131c1da76bbe718105a9b960dca235fee026c842fc8cfdf84c710f4b9f30512254b61c2f
SSDEEP 192:DfWDaVMRJ0JtBrIRDQaILQGIpEN5TVlI+I0ICaPKvrfPtNPr+B/UlabvsZsbtq4E:DfWDaVMRJ0JtBrIRDQaILQGIpEN5TVl9
TLSH
T1C132D0F7D3D9C62D885156F4DB256F1BCE2D0A28432C3D2AC8D4AF4B93E18B1D241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 c2275b4403aa7afbbb5a57e43fd4a43bd8b751f6c6468884f79c4764a776cd57
MD5 285a6769e7b116a00f7a8f721ab1c678
SHA1 4d4461c8c814b56ccc9a38c27847543845d3077e
SHA512 317c60e13ee363daf8ad5d1cd5f742cd178fc4d6d7fee87d41aff43e228ba2f50a8315a790990455bfef5ffae6ee02fcbc0043122f7170b26ad98e13abbde292
TLSH
T1B7019E979BBB7567107D5ABB1D05BC056577AC3141A06CF4DF5A412CF0C16E30F16472
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9ada7061b5c90a29ea972afb8ae4c527607c59af82ddd91cfffbe7020725f150
MD5 fbffd78670629db2ff5d99bc5744cedf
SHA1 2a98ddca4f8ddc0b2723ac065790155943c2db4a
SHA512 a3618f5411f6bbdd6febe201e623499acdc3e9612f11dc1a086c4a2da7112d7b9b67ef1496f6759f54aa06bf16cfdea8f6cb574977a29909798bcc79ebbaa23b
SSDEEP 192:HRhcBzFCIGb2FaHfv72ymwiPRpgMwf5E95Hsb+WNwOh8rnA3ID4eNt2AeUSjaT8K:HRhmzFsH3QHXYq7w24TeX2daQe
TLSH
T18062D91BA92029779CDBD21DF9117767E7F5202615D42E84FAFC9B2C14E76CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 4334d7f2859f80604d0f34ec96473fcbd496c3a27bb1a623d595c3102809d4c4
MD5 c2ad04ad0e3bcf02cb8367e4413b0801
SHA1 8000bd829d4682ea858f56b0373363e0dafe7471
SHA512 82fdf48cf9b57004b705d14b061e60b72deae997a07978ac54bc1504968242a74b7c82a6cca820ba50d7c15f487dd5e0ff2dd0f6430544c007bab654869311a0
SSDEEP 192:HRhcBzFdIGb2FaHLv72ympiPRpgMwf5S95Hsb+WNw18rnfUMD4eWt2AeUSjaTVyr:HRhmzFJHzQaXYA7wL8feO2da1e
TLSH
T17762D82FA92069779CDBC21DF9117727E7F5206625D42E84EAFC9B2C14E76CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 97c9cb50c210dfad82c357e37745d0bf7d8302e829a6ac719ed80a1d2f1a2fda
MD5 b1725d1884981f7871eb87b851a71b23
SHA1 4d7881689ad08ac868647528552d3167c8aa11b8
SHA512 cee9b3cf8f5665d8407635683f65b093f71a65294faaa2937687f561757a424a16049f99ccfd850a19bcfccfe45b5e301643f8ab6144e3acf81918ef7235a962
SSDEEP 192:HR9EdIGb2Falmv72ympAPRp2/95Hsb+WNnZ+nEt2AeUSja0VyIsnAUgtaJ:HR9EJlSQUXo7wEnY2daw8
TLSH
T11342D92EA92469379CDBC329F9127767E7F5103625D42E84EAFC9B2C14E75CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cb154d34574237305bf468bd646ae93f7f6efe7d9e3fe38a1bf7d5fecbe95acb
MD5 987af7acd48aafa57e1db53795b50d4d
SHA1 a687085725a5acaa2667dd30bac8d170ed69adcc
SHA512 2c122784c72d793154d3f1ba9902e55cf2dc325d8b20fcb14b172ba44291c75255b19d2c890d8584154861e5ff06e42820167c9dda266b35f8c8eec1ddc010f8
SSDEEP 192:HRhcBzEdIGb2FaGmv72ympAPRp2MwfJ95Hsb+WNn8rOBe2et2AeUSjafVyIsnAUp:HRhmzEJGSQUX+J7wEp222da5e
TLSH
T14B52C92EB92069779CDBC21DF9127767E7F5103625942E84EAFC9B2C14E75CC221B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 dd32d74e1c4c0b3737ebf5244499bf622085b78fb3210d65123040bff90daa97
MD5 c4b2b1e18dcd83d5d75f2a3b34ad7f74
SHA1 368e2fc078d5909cdeb0ba242b55fb732b0550d3
SHA512 f200e1c378aee4fd9654f2e19b1f639b2da35692f63a59456e9efd59ed96742909ef87a23f101313b958178eb11a17fc1c7b4172a48ef350333a922daf337217
SSDEEP 192:HRhcBzFCIGb2FaH0v72ymwiPRpgMwf5G95Hsb+WNwOh8rnD4OD4e2t2AeUSjaTVK:HRhmzFsHwQHXYo7w2sReu2da1e
TLSH
T11462E82EA92029779CDBC21DF911776BE7F5202265D41E84FAFC9B2C14E76CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 11ce2de2a1d9b391e4d454a171e68e96fbd33852af3f2f24459bed26ac32e206
MD5 2e821609f976f608531790d2234f7b36
SHA1 7c720d1bc6fac759f3ad949e3404002ebac92ea3
SHA512 c5a0ea7443fbeb074358dad6c340d2f5347d7e2794bbd2445311eae517bd3f7fa9832f2d3937d40a7e603e773b197abfca8d2f3482f10e89e5b660d8b3840c6a
SSDEEP 192:HRhcBzFCIGb2FaHRv72ymwiPRpgMwf54y95Hsb+WNwOh8rnA3ID4eNt2AeUSjaTN:HRhmzFsHBQHXYB7w24TeX2daQe
TLSH
T1AA62D91BA92029779CDBC21DF9127767E7F5206625D42E84FAFC9B2C14E76CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 014b7f4ddf5d2d53f5fe048f27f07735a735b335e44b422414f171ed15b3b846
MD5 fb268d78174bf57f487bb2350f8f2419
SHA1 cada765b4f8a6b2e8110cbd230480a41dba59708
SHA512 ebe88500e1ca2f09a49c78c4b1d4d00e2068610f973b915c3fc566e0b0318dd01fda009c8e7f2e31a32830b121594c6ae904dd88d634b4b92dbdf9cdbb348c1b
SSDEEP 192:HRhcBzFCIGb2FaRRv72ymwiPRpgMwf5Q95Hsb+WNwOh8rnA3ID4eNt2AeUSjaT8K:HRhmzFsRBQHXYS7w24TeX2daQe
TLSH
T1C462D91BA92029779CDBC22DF911776BE7F5206625D42E84FAFC9B2C14E76CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 cbf74d6dd87d494e97365eab275db5b7e25d2a7c0e3ca10e4ca74f408cd945b3
MD5 543a06b5117a6e7d70d093e57d2b6bb0
SHA1 edbc7f61bd7dbf4372406966392be80d00aead76
SHA512 9dacc513b17872e8e45a3329f2429a357e4a0192684f20662687da33508a669d546b838d3dcb3a002e2ba9595107a89f5bec02a985e8a853e29b7681278dd3ce
SSDEEP 192:HRhcBzFCIGb2FaH1v72ymwiPRpgMwf5G95Hsb+WNwOh8rnIncD4eBt2AeUSjaT8K:HRhmzFsHFQHXYo7w2cveb2daQe
TLSH
T1DD62D91BA92029779CDBC21DF9117727E7F5206615D42E84FAFC9B2C14E76CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 b127f9e57be2557abbd3c10bdf95e04cbe6ca37539ed208f6b4f2eabea82af8c
MD5 21c61ba013ee47b60a88f05d33878a67
SHA1 80a288fd0e0a7183f3f933454103534dc1f0dad6
SHA512 6d5c985862e285ffd626816b137e43754f033ac6214a6f1421bfd530e866146ee3eb10ad86b80c81f39576e6ba45def0237b9e86610132ca550bb45e8018156f
SSDEEP 192:HRhcBzFCIGb2FaR+v72ymwiPRpgMwf5yk95Hsb+WNwOh8rna5ID4ebt2AeUSjaTN:HRhmzFsR6QHXY4k7w2kTeB2daQe
TLSH
T18F62D91FA92029779CDBC21DF911776BE7F5202625D42E84EAFC9B2C14E76CC2217027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 325a5f42772c5a3f82e03efdcc2ee51b56fec2aa9e6778b8d4ee18015e5c71d9
MD5 f03708ae1cbb06ae075928712d75f231
SHA1 b3d48c5f7b27404c3e5f9bda1dc4e0b56fd3eeb8
SHA512 cd5bf4973ef84dcc598196a23c28a5dc0d5a8ad1c94fc361837f50bf040a8110c63c83e4d9d48a8c6e7eee9f73c85842649dd5c230de842fb00b96a868e07fc9
SSDEEP 192:HRhcBzUdIGb2FaGmv72ympiPRpgMwf5S95Hsb+WNw18rOD4eCt2AeUSjaTVyIsnB:HRhmzUJGSQaXYA7wLReq2da1e
TLSH
T10352C82EA92069779CDBC22DF9117767E7F5203625942D84EAFC9B2C14E76CC221702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 fd93b91f01c948932195e3d40d29707065aeab229e61451de47a3009af7f96a0
MD5 54cde8cce80c1dbf70ff16a8cdd7060f
SHA1 2ea639af59fde7e50c42d0a826d11762017a8cac
SHA512 a3943da684e6958ff5430b7f130a1375b99139c75e075415019ea610fe51cc11b410a06266b7950f942820bf7572eda92eb8d3f319e3cfe0240fb2e0359bea83
TLSH
T17CB0125080015101C80702F822927488B1389F10A70A2B4553E0AE2688252D08016090
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59551b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59551b.TMP
Size 96B
SHA256 ebfefe0a40894b9c6f87139196fc674c526550c0392c32c1dfff629732ba7bc8
MD5 8debae5095a9cb32f855796bf6ed968b
SHA1 4b388e6eb9e4503d9efe12fd4f9b89a3e764aaa0
SHA512 926126daa39c8f8f771c89dc77e3a5503b80c575e6a87446242c555b710022d6f2f642e0bd43cf9805698bcebe8e9ee223b5489356730a1c3c25296455397707
TLSH
T106B02200C0022282C00303B02880C0E83030CF22CA03820AAAE82BA2CC2C220C220030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 814a59bfc61e5ddb7e8127d3749ad6fc9aaebb10fb211f9f294b1934ca4894bc
MD5 6867858df7af02739492d0d473abe43d
SHA1 0d6a4203a3861aa798602ac1a23701542782cb98
SHA512 5e3c0024a7e7065cc9c64433812805eb069f319c02bd77ad0b570e7ea458d0aea9e4cf6d40578199241795df44132e7e64e26cbe3514a1812546703d2de53e03
TLSH
T1CBB0223C30C0282BCF0833B032C2CC00BB203C3002A38F03A0E880888833A008A8008C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 23053088c8e5db3d2f56ca0839cb14ed09891e763b5f8416ccd05eb1436d8b0a
MD5 4c06a881828bb192da82deac2e20e8d8
SHA1 7bab3becbe0554afd30ea66ec2f38d03b7804a2e
SHA512 fe7148d0e9796551da6f87328443de36b26b0fc81e3acec36850c85ae018c87d4dbee9b55c984c375a1d696cb946fc5eb881dfce82dcaf5c8b3b31ee896780de
SSDEEP 3072:XJMgyiyUIM7zCs7C8oXG8p7iHwX+jty24WK5p3CWEqfd7NtZL8cHQRZEQ6Spsw:X5DyU0gy2g9XWty7WK9EqZ/ZLW3Exw
TLSH
T1793412337FD72F334DCACF74B0176B2A3BE1562AC0B4D356A678759BB8439A16900818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 3777fe7ab0ff11e75c6728be01195150c17bd1fa43a5a6e022d0dfaa7db1a5ed
MD5 8e36ac178a1095b1d8c5f96f07ddde9f
SHA1 3d2833f8bf99c3d1bad11f7541fea5daa5868f5d
SHA512 e1243c6503047f3309bb44b68d4753ababc6b0552cd0b1dd002808d920465127682acedd41bb2e92bce25166909d7f9a8267541e3bc0bda27945e383e3f0c659
SSDEEP 3072:oJMgyiyUIM7zCs7C8oXG8p7iHwX+jty24WK5p3CWEqfd7NtZL8cHQRZEQ6Spsw:o5DyU0gy2g9XWty7WK9EqZ/ZLW3Exw
TLSH
T10E3412337FD72F334DCACF74B0172B2A3BE1562AC0B4D356A678759BB8439A16900818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 fc4723c6b8b72906122fa676f8f0236ec02d1732e4e5bb83e503ec9438cb9cc9
MD5 abff30c31d41f08be59bc7bdfd8f9f96
SHA1 5bc6b0477bc002325d1504b107aee142d42246f7
SHA512 705a5be0caf0073804eada068e99f636c4c00ed6d205e403f82f1015671acefbb99f9fa534b575e019677832c5eb790912f967451010ea5bbbafa145f7575a53
SSDEEP 1536:TcQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Nqfd7NtZL8cHQRZEQ6Spsk
TLSH
T160C30237DBC21F339D92CB64B9530FD6A7B644A59034D301AA7D77BF6C83891644289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 8c8bbbba5ca6e47b96c67553f0969026c573ce252ad7a769a5b4e85648b858f4
MD5 40571a685d0fa0b68db0075a35cad9e1
SHA1 ad242046e98a4b9d4011fec3aff5718c1662722a
SHA512 e23c36616368444b212280fc6f1a4e99762c871e54b8646a4514fc38694287d7c8dcfeb7bff2fb124a82bf23d2f66faa29f8d5c1f74c448175e78e099f8235c5
SSDEEP 3072:W0MgyiyUIM7zCs7C8oXG8p7iHwX+jty24WK5p3CWEqfd7NtZL8cHQRZEQ6Spsw:WmDyU0gy2g9XWty7WK9EqZ/ZLW3Exw
TLSH
T1693412337FDB2F334AC9CBB0B0275F6A77E1452990B4D36397B876DB68539A16500828
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 dc1ad800a85450a617a4eb7805f8448c9a23d5e11285b54b50fddd36d110723b
MD5 a18abeb2f2ce84e9090e2a05671cddfc
SHA1 06c4ffc6b928d8d95db7db1c521566cdd5dd9de3
SHA512 efc9e9e309b1841351b17460724f4fbc63320c0bc3fc9d2c3477a15ce65b3f42acdb08a85a94b3b6989db776122c31cc0a16f312949b1cfa084d800a29e402ac
SSDEEP 3072:kJMgyiyUIM7zCs7C8oXG8p7iHwX+jty24WK5p3CWEqfd7NtZL8cHQRZEQ6Spsw:k5DyU0gy2g9XWty7WK9EqZ/ZLW3Exw
TLSH
T14B3412337FD72F338DCACF74B0172B2A3BE1562AC0B4D356A678759B78439A16901818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 a9a7d1487a4db9ead0d5735d77b4d6a2b20865d4137caca0bfd54ebcdd939f6b
MD5 dc4eba530f4ba259c0dca8240ec8192a
SHA1 7b17d1e993954b48927922f0869365bce61bdb65
SHA512 8586739ff4bad6a5d8a250c21db3a32e707120838ef5aa575bcd3bd6f02abc142553f44359c7efddef65720f4f4e9c41ae4edb7259585a3ed8c63ded5cc25905
SSDEEP 3072:N0MgyiyUIM7zCs7C8oXG8p7iHwX+jty24WK5p3CWEqfd7NtZL8cHQRZEQ6Spsw:NmDyU0gy2g9XWty7WK9EqZ/ZLW3Exw
TLSH
T1313412337FDB2F334AC9CBB0B0275F6E77E1452990B4D36397B876DB68529A16500828
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 2f86d2f95f016d41d70d802d006b70a25a3fc96288693e137b485078d00e4828
MD5 f31d7176a8f0d9cb40c46802a022b757
SHA1 4c67c6700b1a2d740a534c472c3e6d1f22e06f97
SHA512 c4ab3bad3e690022539fe21005e9c3cf6109019e885bc4416dc2824a1905222651d747690d20275ca44b1a29cef8c1d50f94382c199974168ad809adef8abf8f
SSDEEP 3072:RCvMgyiyUIM7zCs7C8oXG8p7iHwX+jty24WK5p3CWEqfd7NtZL8cHQRZEQ6Spsw:RCnDyU0gy2g9XWty7WK9EqZ/ZLW3Exw
TLSH
T1093412337FD72F334ECACF74A0176B2A3BE1562AC0B4D357A678759BB8539A16900814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

index (1).php.crdownload

Path C:\Users\Admin\Downloads\index (1).php.crdownload
Size 19KB
SHA256 96e222737f6283a8082d3baafa2f9b6b522464c4aad492db581ca6a2059502cc
MD5 26de1d7710831048429cc214563c97c8
SHA1 425492b89c3dd87955d58c8483535ef0fd08c850
SHA512 3a08dd74f1427bc86d10caa625c7362a23b10fdc9f8a97e4592e0a16aa34bffd701f34b1fe05fb03f4c7b3ae4d7115bc86d7bfef875557ff9f7690dc97393424
SSDEEP 384:YGXo2VxUwLxbwGa/A3PJhZxi6fYbb8cxe:YGY2vUwyG4A3RA6Qbbfxe
TLSH
T19B9296AA60850D53EA96D5CCF4423A49061FE24B99DD4E24F69C4BCC4B87B4C92CF2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download