7a53544ab3a3321fe5dfb45dff2fbb8aa2ac47a441e1fa96a97c998b0f2ac2bc

Resubmissions

05/08/2026, 16:38

260805-t5qqasce79

05/08/2026, 16:35

260805-t3x2la1drc3

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 16:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Freshman-Year-Goals-Planning-Worksheet (1).docx
Size 8KB
Sample260805-t3x2la1drc
SHA256 7a53544ab3a3321fe5dfb45dff2fbb8aa2ac47a441e1fa96a97c998b0f2ac2bc
MD5 87aa9f3d0b1e52e5a3e091a53ed21d62
SHA1 b7ebf1579d37dc64d57e2fc5c19f147eeb7e1d9b
SHA512 e8c72dae602c34c790713cc3396537d3f92971498cea59e1f7db76200ec6e0599c4d9a967cc5782941404f3484cd2cc2504929fdb90b8c911223e8f96bf83bc8
SSDEEP 192:2fgjd8R/q9q3qt91LBWg8xFc67+lZNeK+5:20wqDdf8p7QZ+5
TLSH
T1A7027C24F6C2D261C30791B89046D407FBDEC602E216A78713C95684ACAAD916F63FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1268	chrome.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	WINWORD.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	WINWORD.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	WINWORD.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304213538278698"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
1232	WINWORD.EXE
1232	WINWORD.EXE

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
5452	chrome.exe
5452	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe
Token: SeShutdownPrivilege	4936	chrome.exe
Token: SeCreatePagefilePrivilege	4936	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe
4936	chrome.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE
1232	WINWORD.EXE

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 3872	4936	chrome.exe	91
PID 4936 wrote to memory of 1740	4936	chrome.exe	92
PID 4936 wrote to memory of 1740	4936	chrome.exe	92
PID 4936 wrote to memory of 1268	4936	chrome.exe	93
PID 4936 wrote to memory of 4676	4936	chrome.exe	94
PID 4936 wrote to memory of 4676	4936	chrome.exe	94
PID 4936 wrote to memory of 1292	4936	chrome.exe	96
PID 4936 wrote to memory of 1292	4936	chrome.exe	96
PID 4936 wrote to memory of 3352	4936	chrome.exe	97
PID 4936 wrote to memory of 3352	4936	chrome.exe	97
PID 4936 wrote to memory of 2708	4936	chrome.exe	98
PID 4936 wrote to memory of 2708	4936	chrome.exe	98
PID 4936 wrote to memory of 4760	4936	chrome.exe	99
PID 4936 wrote to memory of 4760	4936	chrome.exe	99
PID 4936 wrote to memory of 4232	4936	chrome.exe	100
PID 4936 wrote to memory of 5076	4936	chrome.exe	108
PID 4936 wrote to memory of 5076	4936	chrome.exe	108
PID 4936 wrote to memory of 868	4936	chrome.exe	109
PID 4936 wrote to memory of 868	4936	chrome.exe	109
PID 4936 wrote to memory of 5664	4936	chrome.exe	112
PID 4936 wrote to memory of 5664	4936	chrome.exe	112
PID 4936 wrote to memory of 3352	4936	chrome.exe	119
PID 4936 wrote to memory of 1084	4936	chrome.exe	120
PID 4936 wrote to memory of 3976	4936	chrome.exe	121
PID 4936 wrote to memory of 5452	4936	chrome.exe	125

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Freshman-Year-Goals-Planning-Worksheet (1).docx" /o ""
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1232

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff921b4c728,0x7ff921b4c734,0x7ff921b4c740
  2⤵
  PID:3872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,9716400165284267221,5861775014419223634,262144 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,10143651098149256892,14057512145549349391,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1808 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2268,i,10180851498964445219,15404859808590709011,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:4676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,4746497375928533187,3266461975545137043,2097152 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3472,i,11279758391990612735,15393902783705390150,2097152 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4480,i,7822339002861174256,17527352540964689291,2097152 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4488 /prefetch:2
  2⤵
  PID:2708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4660,i,533322693642698692,2418211300752035989,2097152 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5520,i,4945078905107326732,6300399299013827098,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5568,i,12037984581937934964,4778888633915387047,2097152 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5940,i,9822335573783411121,17647005846457919897,2097152 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3544,i,4451010448642286398,2487949997661387719,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3516 /prefetch:8
  2⤵
  PID:5664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6340,i,9442700641254589945,6371894270952064716,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6408,i,3989211146271993641,13883610925966875896,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6348,i,6287659584377940103,7248297458919203882,524288 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4856,i,2217762531889147874,8809920195444609689,262144 --field-trial-handle=1908,i,1306182713681656891,16408021304098353493,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5452

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3060

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4b33807f69cf7039343bbe3f957d06d66780b019bbe30a59afc4b0a3f0382829
MD5 3635fd0844938fdc39c6a3c857016b09
SHA1 a0bb64ba934df5100dbf57a7a53b1db8747d3a12
SHA512 4211de13ecbb9efe1b0cf2f08ef32dabcc249812b6a7342602f7a6bc99adea3c1dadf1cabf8e0fea45668d68b60022724e661fdab8a2e51be4669a7df4235c1f
TLSH
T17BE02BA5C922EC3B18F81718A4754749EB51139726409C4F7B3D500C4FB473A458685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000058
Size 55KB
SHA256 52a37b3a78eb5b59df3bdb129b9115c6fed9bec6ca62b55ae56d8c2701de5972
MD5 fdf2600d905a0faa060d691e0212e1a7
SHA1 62550f0993a219e265ff9a0795a4d9f49b28748f
SHA512 7118d2ea3aafe3d77709842da20acbe3faaf4c6c92a50ab05ecd4986916bbb92fe297a1b00357572683b02c61762cdf31dc425f03221dd169803252db5f04f7f
SSDEEP 1536:HYDhrXLgUVTf98fcANMQnJULOK+z2N2Vr8KO:HYDhrbZTF8ffZaOzM2Vr8z
TLSH
T1804301FE4895FEB9B094C7938D7131E02A664022453CBB71774B13B76368E7682892DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000061
Size 56KB
SHA256 5ac2037030385ad8cf10e486b44475d778eef2e2a377751fbf3c938fd3991b1c
MD5 5e53ed25086aaa0d3337101b741466ae
SHA1 08b6244aa107201b2b4e6e76ce4c123dcacda182
SHA512 7c90e1b48ee9a1dc112bc1921e2a42f4d329d734be246ed488aaead60ff14e2581580e6629bd2b24c109cb66279190df3ee494eb83d1b96f418886cd72f2747a
SSDEEP 1536:FyvVCHVdFlgUZgt9f+rCIAaGrxNkcW3hzT0iBTXe5SLzmG:F6EVOUZu9f2CRzrxv0h0K7ewzmG
TLSH
T18A430207A8501D88A3A512B3304BA39F25FEDD587B744076FBE068F9BD5AF16314D09B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000062
Size 57KB
SHA256 e4dd3bb15ae6492d5ddff59e08075a6023463b82cfe6c284470fec0d86fe52ae
MD5 26a1891f272dc17f5ac69a8cfde2991d
SHA1 097239d7cb11b964bd6a745f24e5f82267fcaf0f
SHA512 2b78bc3b2e57aeaacdbce5315b117c8900f9cfb99e331704c80f871882b1f0ad88ef7d6808fea6a8e93e1e65a239beaff9c3d61a07191b96bc21c0fac759d783
SSDEEP 768:eEWSWa7VSQrI9kNTF9HFrfpjBooNuDFjy3zW5/7lo6Ks2zQ5oF+mK8UMrrbFHpLY:ElQ8UTJrhjKC6jyT6/8Q2dVxJphFSy2
TLSH
T14D430167125E0EEB16A860EA197B4FEE86DBC57C733C75A700E39630F6354540E178A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063
Size 55KB
SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
MD5 cfd886e1ca849a7f8e2600763f236d78
SHA1 c1fc2b10d20c529c01b465a1edc0ed2fe04f0bd5
SHA512 254e37e3650b2c87b524c96f517586b690094abf7c8e0539b050ecdc4c56c2593bedab7b1a830b827ddc19f1c3e05ff4096ebdf4cc969b5bc5fd33cb34e94fd8
SSDEEP 1536:WJG/KL/shmr0SyKV2i0Qz0j72A2+0G+gSRLBeFDP3:liL/8mV2i0ac6A25G+1LBehf
TLSH
T1444302EC6A22F9ADAB11E5E847349AC2F140D6DE34156293509EDB98200F24ECDCB75D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 c1bbb6ba352f64387f2c4e7faac851f1982a8c150fd7b1116e53a73ea7bb4449
MD5 d3fcd3d37c891d3bd6bf0996fd5482f4
SHA1 41e09434a2079b62a31300c9f9a23bb98efdcf06
SHA512 3b1afb66b7a6797b417d423ff533fe99633d7622f06e44c8c1f6de6790bed5ec3726264759a3ca2c27e5d7dbc59b928b18effb4544ed3bfd98005a041de9fdfb
SSDEEP 96:ovtpvVQ/bE3TjrrSy9V6fv6debODG/5DS:ovtpNQ/1y9gfv6gbODuk
TLSH
T1A5B1CB1CE8DDF7A0EF50E5778B6C8D1A431C11C88223111E8D8AE487BE3A797DE9804A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.tiktok.com_0.indexeddb.leveldb\000003.log
Size 476KB
SHA256 f9752320a94e887b198451c9c4e6cf1136546a703480f4f52dfcca79996dc5ae
MD5 5d39e20b08153a00131f00cc54fdb9b7
SHA1 96afc959522719653e8ee6f3b53d097dc600a43b
SHA512 c31e4e37075b3efb5264f733a2583e9609cf5fa6a05fd9a9dd124e6b416f2f824e78cca245b8e6455252da7605e589679b5d78ae6f620120524a1ddf76a90064
SSDEEP 3072:M50N5p6Hd+ER397qlA+tJUyd2WaIZJMydqyKKhpDLLl+ynTRUTk1tzouE4BB6hRD:MyxK3
TLSH
T156A4357B55124EBECEB792B26E0847C1313B0E007DC3DA4BD5D9623892369EB52E3359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.tiktok.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.tiktok.com_0.indexeddb.leveldb\LOG
Size 347B
SHA256 aacad819851c05439296bfb32e7face06c4a086ba6ca7fcba0a07a8cfee3006a
MD5 fe87b7c4b566774c66aadc83c3fe7f75
SHA1 665dcc04769d64a853aeccc4b044e5d9923bdf68
SHA512 26e037a09a52081342458abebadd5af9332bcf59ed359a5dc0db5648efe1ccb7898d0e6274574537a52034c6712976f827556a37f770b121195402f06ddb0858
TLSH
T14BE0D81C54C9C55F109880EB3924770ECFD6350DEBCDA9464F03D914A0C500C94B8A71
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.tiktok.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6e48554e9dd084dc5b9e9be38da685b85430ea2ccf0c62cf9729b498f01f8f45
MD5 5230ef2006d8d06c81aea6b39ff9b136
SHA1 b4a21bd388f0b1991368ed444fda484651c26b36
SHA512 52f731130987595c15b45dccc16809a53639165319bdb037f2b28feb5e1a3c679db1d2a5e186edadaa87c9a89577a110e22f8139abdfdbe1926410bfe7abbbbb
SSDEEP 192:DDbBFY5aaZABww74Hz8HOvYBWC6KlbySzFhpvH5eT:DDbDY5aaZABww74Hz8HOvYBWC6KlbySs
TLSH
T177D1BCFB93E9822D9A115AF8AA056D1FCF680524032C387689D47F2BA7F3471E20175F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2bb897d659a7f1dd70257738445b4cf4c4f8620d28bbac06139c1fadd3998d8e
MD5 9056e1833dd6b10eab9779c9045e4278
SHA1 ebd6fe92e72f58f981d042ece7af9f52e1fdf4de
SHA512 febb0bffe79eb054181a4a005f1622c10802cd70b3d34874638238f45c0aeb194903b0480d747d1f3b485a846ec2ae0e20c51153ced6d64d79ffcab9097829e3
TLSH
T1964148F7C7E8897D890196F4BB152E1FCE2A0E14576C3C5AC8D4AE0B53E28B5D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ade91a47ccd601869a2b186f8c3ca7a85a940bbaf8b814e135467c84beca1dbd
MD5 b371287fb6be70d6f3969c6543d46ad2
SHA1 77c472b2cbbd5703bbc9156f62b079c78eec2016
SHA512 5e68c6db30bcd8e6874e0fd3cfe2e7679a23a0c733365561f2fb8be4fd5e53e2a92f67cccb28c38bed6765b7879bb59a74777e4e5e90f7f927757143dd10cc82
TLSH
T1404148F7C6E8897D890196F4BB152E1FCE2A0E14576C3C5AC8D4AE0B53E2875D24068E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1482f2f6e9000c50bd4b1a4e43a36066087f088bcf031531ba1ac552f7f75925
MD5 8059019111e0385b0a94a95e89ab2ba1
SHA1 8618f7c4dae92ea07c6942053d9df539f7111295
SHA512 dc3c3821c86d5c7f5148d067090d8fe5cdeae3e6270f9f33eb3463d34b6b1f281513b9195edb5a46f137326c722e56c6b66e28cc11e58fb6a218090eabca8f6d
SSDEEP 192:YRiY5dZpqy+Kxv7MF+pzPRpjBF9HHsb+WNnvcFU76q87D2YlDI65wVyIsnAUgraJ:YRt5j8PmgoFXn1wkm637D2YlDI60e
TLSH
T14552A46EB9116D7B6CDAC229FD527B13D3F1112565D42E84EAFC8A2C14E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 20742aa57f7fba62fe62f97a80904460ee62665cfa8ac54200dc10eea963dc93
MD5 ce5d4bb059db6b03713768ebb135bb85
SHA1 bd07a0253fa12ea404abec829be6982932b62154
SHA512 97bca966edf33b30894a9268531afd39deae6b732994808199fdb4ded8388b5a69c220e275b4a2d629ec174aa75bf1b8bc8a4810ff2a5f3c0196c24280a7ec08
SSDEEP 192:YRiY5dZpqyeJv7MF+pAPRp2S9HHsb+WNnvc0n87D2YlDI60wVyIsnAUgtaJ:YRt5j8HJgoUX91wk087D2YlDIp08
TLSH
T12942B42EBE11697B6CCAC229FD227B13D7F5112565D42E84EAFC8A2C14E76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 7999d86f0273f5840a505a50430153f368e77d036ba3d0430305926d52040fbd
MD5 8895c1643b3338334574709180c7d1fe
SHA1 0db1477d7540f4a3295e466e758f90d61d8fbbba
SHA512 82057b00c477776f4e1657570709f6588e3568d8ef4e8a4e0aef9e98bf46d266f9680608a23cf7e2354bec884ed4ee25560c7c550f51adbe50570b662b4fd9c6
SSDEEP 192:YRiY5dZpqy++v7MF+pzPRpjBF9HHsb+WNnvcFjY0J87D2YlDI6VwVyIsnAUgraJ:YRt5j8P6goFXn1wky0i7D2YlDIk0e
TLSH
T1CF52A46EB911697B6CDAC229FD227B13D3F1112665D42E84EAFC8A2C15E76CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 a61fefd8180bad7aabfac8b7d8718b05f214f1effce96c33dc381b0bbc2a8887
MD5 be0570f093570071eacef97ce1bdb113
SHA1 80cef63c9d77b683e7a413b43e5d0804c7e5f1e2
SHA512 cfdb75f1129d145c31effcf75365b3c0c7eaf5a816d9c6b521b9c0dc1726457deac15b7dfd957f11878ac9c4fd2ade8399de625ff6b7f7cda5e4f6bbfc170f7b
SSDEEP 192:YRiY5dZpqy+1v7MF+pAPRp2BF9HHsb+WNnvcFamGZE0I87D2YlDI6VwVyIsnAUge:YRt5j8PFgoUXy1wkCEw7D2YlDIk0e
TLSH
T18652B42EB911697B6CDAC229FD227B13D7F1112565C42E84EAFD8A2C14E76CC321B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 bbf61714ecb7832f919e7c8bc0de1fbcc7a5327fdf78ab83a29b0fd29a352e7e
MD5 15432de1f4608db0bedd789d7bd703a4
SHA1 b7ac8552190370cbf34213ff9294d37445e3616d
SHA512 798fda87d7b35c4e400b82a375569bc7f0e55978dbde3a9d888cec824765d58ed1e304993042f14f5921778437b3b04c7a2a6f1a5a1d6a7caefd9ed489f8affd
SSDEEP 192:YRiY5dZpqy+hv7MF+pAPRp2BF9HHsb+WNnvcFJm2v87D2YlDI60wVyIsnAUgtaJ:YRt5j8PxgoUXy1wka2U7D2YlDIp08
TLSH
T15E52A32EBA11697B6CDBC229FD227B13D7F1112565C42E84EAFD9A2C14E76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 14bb7e2c5c43752e996a783455605149d07e1a96c7786ff8c24faff623af242f
MD5 699e91db3bc00421baca448506351507
SHA1 bd409c7147b80234972bb72deb4d7475a8865eba
SHA512 7219e502a2320ae771101df46ce42b544c4e95eace6bb1f0b25d8316ee654854ea4f0ef116eed18c4620f7287e53c55be5dfe8211a5292b661d28102d5999725
SSDEEP 192:YRiY5dZpqy+txv7MF+pzPRpjBF9HHsb+WNnvcFhpfE987D2YlDI65wVyIsnAUgrK:YRt5j8PTgoFXn1wkpEe7D2YlDI60e
TLSH
T1FB52A46AB9116D7B6CDAC229FD127B13D3F1112665D42E84EAFC8A2C14E76CC321B01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 34d3b150d9ebc3413240a436dcd8cc4d2da0e46d00a681d2118263aea9d32f3e
MD5 73285efb9f7ee0bd384426865ccccf8e
SHA1 51903f2b7a36fa90857257254c2bebdfe5da7eef
SHA512 e9bab3e8a04453bd7ca516137298f57170d38058ccd5df170108532fdb6eefb2d5ae94de47967a5242cb07be597050bef4f69d7f740877c626e131f01424e28d
SSDEEP 384:TRjPq7KxkXqKf/pUZNCgVLH2HfgslT37pLuLcSjFgXODPO+ErU3voHGjBm2oR0h9:TxPq7KxkXqKf/pUZNCgVLH2HfgsV37pM
TLSH
T1287219676C4C8E7B0F94CACCDC167F4F9DB5025B65EA886482FA582903D5ADF01061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\9772b774-08f2-42c5-bd96-0ee72ada1747\index-dir\the-real-index
Size 72B
SHA256 aad2bacaa4a0a8c288cae103812a2b7ff50d6f734d7373ac888c55734ceddf92
MD5 5a3515cd17e7afc50ecc4feb08ba6ae8
SHA1 dd0dc8092d3f2e517b797674120db5fb6e92e62f
SHA512 4488b200359e15d30b6559bc6ae29d2c5cf12ffbd4c656359ff40c64186cf175c779ba8a66cf3f48de7c3789ad16024c4983c8cd1b62117c411799f1351b24e1
TLSH
T190A00218C34C6911D06D8770168D434972504D140146275288DB59DE9AB32444213495
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59387b.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\9772b774-08f2-42c5-bd96-0ee72ada1747\index-dir\the-real-index~RFe59387b.TMP
Size 48B
SHA256 0fe85a352b669efa55358c32e41d0d0b24000f6bfc2e603fb06098409dbdc773
MD5 a277f4de664220e3f9d3b132e290c795
SHA1 6350c85a48086b8cab23ef3289dde4854c0f8a6e
SHA512 b96aa2db707faf5c769d8f322bcbf3c35f6cbb7df659126a3e47433de658e632e3e602eb4b31d961e0fdf60ed3f0d3634393cb485d84628b25a94d00b16a4eaa
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
Size 159B
SHA256 5f7733f054719bdd510ec81f2eb950f816c74c3fc8367f45efd02183fb41abf6
MD5 80f10e4934ecc319e0407aad09cff3e5
SHA1 ef32008c43867049e383a6c27537090a43b92042
SHA512 684abd907cf794ec2d1fe74f14e89eef019fec48cf196deea60c429854c1b97baba0a88cdf6751ca43cdfc5a48f192a91f570feb35fa0e3da35d4f96b8966f3a
TLSH
T11EC08017555580105E705DC0B07975205D3E55889CD24AC7540111DD16104114831FBA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe593ed4.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe593ed4.TMP
Size 165B
SHA256 0aa449aa9f025aa2957922cc18e0affb4e0ac0db499e09492eed8695c08d118c
MD5 72d722e89b2466e72efaa50798d7acf8
SHA1 769aec528688d2342c49b6a5a49fa13861283a7e
SHA512 d5f0f97d07a85213533c5f9753602e2f03dc05bac1330a3964a9d7f3c28dd0e1dd080c04a6902688531f08bd792f08b42e6c54ff2d8af82b87ef1c1cde37889e
TLSH
T1EFC08017556540005A705DC1F07975105D7E5D849CC14AC7944231DD11304128811FB6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 360B
SHA256 1a5c5972802da14a58bfc975bb0e8a25b5a086fecb50d94bfc38a6637dc0d9af
MD5 f8644d71e14cc85b694577c2444ed9dc
SHA1 aee2702dd5e97026ee7983606492b17c7a827762
SHA512 83358b5b0cb9ce8a23a085b9f6e7df05dbc92656b265949adf84de50960f9d948c33effeb8d7be9cd008862f74ea9f01e97732b65863af945af14fbedf8432d1
TLSH
T10FE02E068A40A302CC0292B0292324EA63358BECCA1B9BA7412C39062E630320A2B1A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5937df.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5937df.TMP
Size 96B
SHA256 84dcaf53a85897accb110538e0614aa0645d3d4aa8e271f5a52497542d8e2116
MD5 3dd142bc6e94d8ea13184ae600a09d2d
SHA1 bf940b308bedbaf32629668f98217fbd854a98f6
SHA512 ab1f773119a759172507489d59d4134a5196f7dbf9cf0a5f1049be2ec8b4479d22ae5109e3577b99215319a48db0a11c50a3fdaad958e2820e0fe40dd8671ae1
TLSH
T153B02200C382B202C08203F028C0C0CCB030CF2EC203A30A82E00A32CC2023080208B0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 7fce12903d013c6814d72741648b86056dc3e6f217dac12c28ad13b91d1f1304
MD5 233ed34fb06fbdcbfb7046b1ff80c0d6
SHA1 9937ad5d025354d6e3758a4ae74d4241b11a5947
SHA512 121d23c15e4f18030403ded16aa03b9e04c8e3002999c02373138b1d3a2c4a997f299f48a8e1fca2ca6adb004026f0131456978bc924a5bbbdac53c1f7114793
SSDEEP 6144:/aaZIPvDPZW50Jbs5IoFm7Rkm1tYpBeh2BAoL:/dZmvjZW50J45Ios9oBGcAoL
TLSH
T1F734233B6C28CCB3299D9F1D500D1A1F1EB28B97E661FED384D62B08B2D53485E4E874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 0af4f87b779a1b11840fac4ee990a0abcbe5f546c67044908dfe623c4d5b5fdb
MD5 778736b7a73c5987927c3636d85694f1
SHA1 17862d530a41a1c51f37ea7b815d41fc575ea1aa
SHA512 69809ae7a878cf67bb385362cbb879e06d3dff1e879574587e7cfe233ae27775be79e5d70aad99cd95a7b08dcc78f03445c0aa305975ba04131ff875fcf07d47
SSDEEP 3072:T9Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMx:TUm7Rkm1tYpBeh2BAox
TLSH
T152C312276D75EC3759B5B75EB08E0B1F0EF14AA7D820DE91C8D85B0423E97CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 04c8d635eea32be7fb51372eb638746a3ee6060a6cd248f99ca79592a2d8a0f7
MD5 0ace3d993dc220747ac88e2d481acf4b
SHA1 e44d97f56924e6fd6f980f2cb387b10e74b0bbe3
SHA512 79c180439cbca25125aacb1ad4e96a71c1e88d54fe054380c8599f7013304b79622069a2a431be1a1e089a62844783e34371a0406c664fdee75071e99748236c
SSDEEP 3072:/1Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMM:/cm7Rkm1tYpBeh2BAoM
TLSH
T1B2C312275D75E9375878BB4EB08E0B1F1EF14AA6D830DA92C8D86B0467F97CC1A05D34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 0b5d2456d5523f19a9ec228a2dd525f0f568eccda3319f12e2fe552a7644d39e
MD5 55143367828782cd1ef898ed8a4ef409
SHA1 8282bec6c58a403d05985996c23f490327dd4c61
SHA512 38ec7e7e4d1a930fc7cc174ef3f3c63cdf070c5aa2eacccb3c78b1e43deab9a400c43ad9ee4a97a787bd4a2125be127a71c3171fd1aafa9d3ce33ac563422dde
SSDEEP 6144:/BZIPvDPZW50Jbs5IoFm7Rkm1tYpBeh2BAoL:/BZmvjZW50J45Ios9oBGcAoL
TLSH
T1D634231B6C6CCCB3699D9B1D900E0B1F1E724A96E671FED388D62748B3D1388578E874
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1232-6-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-105-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-106-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-108-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-107-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-104-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-40-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-5-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-0-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-14-0x00007FF9088A0000-0x00007FF9088B0000-memory.dmp

Download

memory/1232-12-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-13-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-7-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-11-0x00007FF9088A0000-0x00007FF9088B0000-memory.dmp

Download

memory/1232-8-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-10-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-9-0x00007FF94AF50000-0x00007FF94B145000-memory.dmp

Download

memory/1232-1-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-3-0x00007FF94AFED000-0x00007FF94AFEE000-memory.dmp

Download

memory/1232-4-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download

memory/1232-2-0x00007FF90AFD0000-0x00007FF90AFE0000-memory.dmp

Download