05d6bd4d18d0da561464f2d340b4449a51d49a8d9269a8962d19a36f42cde922

Analysis

user interaction
yes
max time kernel
1799s
max time network
1795s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/08/2026, 18:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Screenshot 2026-07-05 14.51.50.png
Size 5KB
Sample260805-wn9sysdl2t
SHA256 05d6bd4d18d0da561464f2d340b4449a51d49a8d9269a8962d19a36f42cde922
MD5 7fa634fd66ff2bb2033925eda2a97902
SHA1 098800953e106fa98bbfe3d1c41aa0bdfed8b504
SHA512 4c16b60109b46cd9317814a8b1893b74dc49efa6d62e06216194a1a75acf6f1714e72ad797c0869fb23ac9379ae3d621cd09238dce1b82b183a8c46ae9de87a1
SSDEEP 96:Fu7O17xvKejOrfKCo+Rk/oVvtoE1IZQkha7qUN3GuisWx4cz5HwU3y9:qOHfjKyCoL/ohmE1IBhkNvGVwD
TLSH
T128B19F837E24D1F68378B4EE6267D6DB8B3B7DAA9820860624876CDC3036905D151FDF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4912	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304267778897162"	chrome.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{D29151F2-DEFA-453A-886D-A3B69B1882D8}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4536	mspaint.exe
4536	mspaint.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4440	chrome.exe
4440	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 31 IoCs

pid	Process
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe
Token: SeShutdownPrivilege	4476	chrome.exe
Token: SeCreatePagefilePrivilege	4476	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
3364	helppane.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe
4476	chrome.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
4536	mspaint.exe
4536	mspaint.exe
4536	mspaint.exe
4536	mspaint.exe
3364	helppane.exe
3364	helppane.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 912	4476	chrome.exe	104
PID 4476 wrote to memory of 2068	4476	chrome.exe	105
PID 4476 wrote to memory of 4912	4476	chrome.exe	106
PID 4476 wrote to memory of 2068	4476	chrome.exe	105
PID 4476 wrote to memory of 4380	4476	chrome.exe	107
PID 4476 wrote to memory of 4380	4476	chrome.exe	107
PID 4476 wrote to memory of 1256	4476	chrome.exe	108
PID 4476 wrote to memory of 2548	4476	chrome.exe	109
PID 4476 wrote to memory of 1256	4476	chrome.exe	108
PID 4476 wrote to memory of 2548	4476	chrome.exe	109
PID 4476 wrote to memory of 3964	4476	chrome.exe	112
PID 4476 wrote to memory of 3964	4476	chrome.exe	112
PID 4476 wrote to memory of 4928	4476	chrome.exe	113
PID 4476 wrote to memory of 4928	4476	chrome.exe	113
PID 4476 wrote to memory of 1472	4476	chrome.exe	115
PID 4476 wrote to memory of 1472	4476	chrome.exe	115
PID 4476 wrote to memory of 828	4476	chrome.exe	126
PID 4476 wrote to memory of 1344	4476	chrome.exe	117
PID 4476 wrote to memory of 1344	4476	chrome.exe	117
PID 4476 wrote to memory of 1624	4476	chrome.exe	118
PID 4476 wrote to memory of 1624	4476	chrome.exe	118
PID 4476 wrote to memory of 4520	4476	chrome.exe	120
PID 4476 wrote to memory of 4520	4476	chrome.exe	120
PID 4476 wrote to memory of 4036	4476	chrome.exe	121
PID 4476 wrote to memory of 4036	4476	chrome.exe	121
PID 4476 wrote to memory of 4928	4476	chrome.exe	122
PID 4476 wrote to memory of 4928	4476	chrome.exe	122
PID 4476 wrote to memory of 3372	4476	chrome.exe	123
PID 4476 wrote to memory of 2380	4476	chrome.exe	124
PID 4476 wrote to memory of 3372	4476	chrome.exe	123
PID 4476 wrote to memory of 2380	4476	chrome.exe	124
PID 4476 wrote to memory of 828	4476	chrome.exe	126
PID 4476 wrote to memory of 4408	4476	chrome.exe	125
PID 4476 wrote to memory of 4408	4476	chrome.exe	125
PID 4476 wrote to memory of 5852	4476	chrome.exe	136
PID 4476 wrote to memory of 5852	4476	chrome.exe	136
PID 4476 wrote to memory of 5884	4476	chrome.exe	137
PID 4476 wrote to memory of 5884	4476	chrome.exe	137
PID 4476 wrote to memory of 5328	4476	chrome.exe	142
PID 4476 wrote to memory of 5328	4476	chrome.exe	142
PID 4476 wrote to memory of 1828	4476	chrome.exe	143
PID 4476 wrote to memory of 1828	4476	chrome.exe	143
PID 4476 wrote to memory of 5576	4476	chrome.exe	144
PID 4476 wrote to memory of 5576	4476	chrome.exe	144
PID 4476 wrote to memory of 1088	4476	chrome.exe	146
PID 4476 wrote to memory of 5244	4476	chrome.exe	147
PID 4476 wrote to memory of 4900	4476	chrome.exe	148
PID 4476 wrote to memory of 1380	4476	chrome.exe	149
PID 4476 wrote to memory of 1380	4476	chrome.exe	149
PID 4476 wrote to memory of 3208	4476	chrome.exe	152
PID 4476 wrote to memory of 3208	4476	chrome.exe	152
PID 4476 wrote to memory of 5176	4476	chrome.exe	153
PID 4476 wrote to memory of 5176	4476	chrome.exe	153
PID 4476 wrote to memory of 4440	4476	chrome.exe	154
PID 4476 wrote to memory of 1528	4476	chrome.exe	155
PID 4476 wrote to memory of 1528	4476	chrome.exe	155
PID 4476 wrote to memory of 392	4476	chrome.exe	156
PID 4476 wrote to memory of 392	4476	chrome.exe	156
PID 4476 wrote to memory of 1588	4476	chrome.exe	157
PID 4476 wrote to memory of 1588	4476	chrome.exe	157
PID 4476 wrote to memory of 5900	4476	chrome.exe	158
PID 4476 wrote to memory of 5900	4476	chrome.exe	158
PID 4476 wrote to memory of 2304	4476	chrome.exe	159
PID 4476 wrote to memory of 2304	4476	chrome.exe	159

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Screenshot 2026-07-05 14.51.50.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4536

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:2408

C:\Windows\helppane.exe
C:\Windows\helppane.exe -Embedding
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3364

C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\GetHelp.exe
"C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\GetHelp.exe" -ServerName:App.AppXc53jt7x72yk6zj4f70fb3gxetfvdh22w.mca
1⤵
PID:4916

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdf617c728,0x7ffdf617c734,0x7ffdf617c740
  2⤵
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,506236238156333182,93118925720176932,262144 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1948 /prefetch:2
  2⤵
  PID:2068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,5645170949420707400,7130832479885686448,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,9016555888826483076,14398989187987893201,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,9114910026242430116,455083116233127127,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,11918879617858146133,10286791769131182551,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4604,i,14417351126942888263,5231329865750813218,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4724,i,14748835976332764314,5508581745927299514,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4808,i,13088364630472813034,13108598097603017146,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,4953881007157008493,11251354125558457992,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,6195796982836272630,4315054795589162711,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3420,i,409930444506332779,6755925066574761925,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4808,i,12233088325524193619,2150283354411754238,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3384,i,2385070373432629503,7197074918189546353,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5832,i,8250601218948316962,6003160955888636682,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6040,i,14554861581765949211,3068081225970875051,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:2
  2⤵
  PID:3372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4752,i,16701741134488482475,15572301250202480243,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6276,i,2520417809832467904,14599939171153786238,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6288,i,16533964202107619810,5401846946929459140,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  - Modifies registry class
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5984,i,8749981546734153311,13624693683307964411,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:5852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5896,i,17367367213652494895,2464977502779808562,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6052,i,17463718578226742461,11437754905610461336,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5288,i,5114298210545747034,11143455343032241846,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5956,i,2653031443212611243,7767676537973853696,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,11892770663894643674,14359476424657852707,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5352,i,11575327936244136905,9042160130168431839,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:5244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5512,i,12877533513952584793,5012678418154900179,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=4472,i,3228327625798860863,4052350873334584153,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4420 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6620,i,10803126395438412627,9684645486858370099,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=1216,i,722212846250491021,11496668445114433970,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6684,i,4178949502272194691,16084729084898990639,262144 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=5684,i,3582755820031766973,12803554107363430153,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=4740,i,2025769887910940890,6964085281307398341,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=4440,i,4801117108538766706,10301623338770508670,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7068 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7024,i,18020285289789086868,17449788264981031552,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=4760,i,3164898204524062223,4104975881430532288,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=6072,i,7582671433066945986,8683775328120546680,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=6776,i,14130699543645815450,13055609258987437474,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=5512,i,4102126876188384076,12163109893287152400,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7236 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=6932,i,14314444517292163373,11391306479758682632,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7500 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=6916,i,8299239487444051541,11898367443384514801,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=4644,i,7171397496343340162,8172478461418092745,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=7492,i,7988930204682080518,3968181164607325501,524288 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7012 /prefetch:8
  2⤵
  PID:1380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7436,i,6303221640711214532,2889866423880816688,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=7096,i,4908345629456772038,9089951673383949266,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6708 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7136,i,1354499075175790699,3136151767278705061,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=1696,i,17757177851100000719,4240750240878802459,2097152 --field-trial-handle=1920,i,5688349311451641885,11943775715416452045,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:4752

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3256

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 37dafac50210c1a32f05485dbf6cadc8a95569e108dbf10b79da9018ca432edc
MD5 1d9a35f75eda42a912c2d427820ece1b
SHA1 5c134a8d063b3efbc0e4850281a835152ca49c38
SHA512 ae3a1f40e39b5835d08f2a3a6a80ea1551db10d4d4841c3329f393151dbcdfd44d100f4ee995e7e6645f5e35e6b4f2403e50b91a8134b6de4ac8cd8437238c98
TLSH
T143E02BB9C971EC2B28FE1B18A0514746E755139B2A50894B7A3C850CCFF0B3A668581C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Size 71KB
SHA256 99ff0be776dea84eaa37ec69b52f6304cd4b37a60677782d9b505b70183b8de4
MD5 9cabca241ae51db3e05f219326a7f445
SHA1 7242a774a9abca60ad895da8e88691b963bc9a43
SHA512 f121a88d2869d4ecb7c3daa69938d7116f237060ff4126e9f9eb3a7ef2f2e8e041a6b1399f8042e9c3560fc1930249add9662d56088e32c739e8210489094b14
SSDEEP 1536:4W7XKPClEZFrypihpDlvQ3Q1WIk4Yfzea3ajKp7FJlcvyPy1:4W7aayl1Wf4SOj1KPy1
TLSH
T1056302C496F6CB8AE7F320CFC84802A6FF045BEEDDD434A9BA791894E990605FF85145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Size 38KB
SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
MD5 9436affc97843765a966b3568fa7e5ec
SHA1 7bfda74bb30589c75d718fbc997f18c6d5cc4a0b
SHA512 473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456
SSDEEP 768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB
TLSH
T11703F112148F7FA1C244F224A4EFE416ACC3F565ABA15E6980B8B7C7010E3C657A46FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009
Size 85KB
SHA256 a7c7f348cb569c3c0611a9770e59996a12addd59ee953f14cd43ab7a5385a544
MD5 05fa5ceef821aa829166af5090e7b64b
SHA1 1f75169794b01c5b207a8fa4f536929bb87064ba
SHA512 ee70f0e7d833c31e5d61761a1a0c966a62f05a002381cf7931343015a2174c6bc149e7db6c25e2f7351e0b1d5749843ca11c8a3fe974545bb1fbdefb2dc7a053
SSDEEP 1536:Je+8malJPEO8aLaRiQVtAYy4hnM0xUvoejFys+E9C/pn1vNXc7qkQNI1u:JFalJQvV9XBGocyq+pUqkQcu
TLSH
T1148312354FD07600199E6F1020BFEE5EAC5EDCCBA98689D05BC3A6B175E5B2C50C51CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Size 436KB
SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
MD5 38e965609b7e0769e6754549cfa3c2fd
SHA1 8ef9e62fa3ae6d8b371f5a9e9344a6cdf31515fe
SHA512 18cff962b979abf3e3d06261422f35502463a0e196aa0cf801cadcff8833a83f20c9e9f22fb3133041e406fdf2304088a0a5eaa4bbb8aff07ab15a0c1b46b0e4
SSDEEP 6144:HT+7EhQjYpz+XUGr9+7Km54TxcjJJEWv6p0qOJ7kuKtAiDL6GnkES7+S8HBWzDi2:6vj0iUI9EKFEJdU0p7riDxw7L8oviJ3c
TLSH
T147942367DF08D99BDA158361EA30EBDD1158EB6EE00A3CC844BB462CE54C0F9F6913C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
Size 516KB
SHA256 9d9283bebe3381a55712d45b50cfc51163e32c3721b140bc0a65455966947885
MD5 7aea65eee8a257188f11db9a42673dfd
SHA1 b9ccebac069b4a1c686bff21f8c37051e33b0e99
SHA512 de2df5200dbcd5abd38c753150136182c9eaa8d84c6b93d54adaf3855cce372813b6971c23fb464c18c37acdfcd97fbec89897ceeb8831fb7ae614abdf3bc284
SSDEEP 12288:wib0yOmn9QTVehgk7mvWxVCwi/XfyOznvDjTzW0p/Hjx:wib0yOWQMfmGHqnbjTzW0pF
TLSH
T1D3B4230D5541EFDCE95E0FF83CEA9C3BE83082E2059B656625D76AF6CC40417A39CC9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000028

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
Size 21KB
SHA256 de772f8e3ac182a446d62b202a5ad7889b3099e39dcfc0ca5505014c842dc6b3
MD5 3e73b21097fd8484f54f7ae2319c0022
SHA1 53aea255aabf3b4c6f3b83470e2eddcddcfddf38
SHA512 7a2c1b87a79b80027bd3b560be9f5ad11acc4bf5d52e2a54d50545bcfd8d6d7865543374e5e17c5bfd378c0c1cf0f3aa9cd4f41ac7f640b1b73a594f805a3019
SSDEEP 384:BHxam1SlIC1+6y5nkzx6QEZl+7D5FjybwjkXREYlkPfHnqYpba4UL:BsTN+lnkzx6QEZl+f5Zys9Y+nqYp+7L
TLSH
T1C4A2E1283936D4083205C778C1D4304E8B68FFB57DAD27D65A930CD43AB6ACB62ABF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000041

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
Size 61KB
SHA256 8daeac5a477af5404c987cbc41e5c4d27c883abb77bd2b68229b7db31ebbd24a
MD5 0fae144bfe40a4010f85b267499fca2d
SHA1 02759923249825d0c27ed54f17e74c628513fa2c
SHA512 584f2d7e39e0ad852b3a0a1ba9db22a7f67c1299f6fa7205248fca8edba31110d076bf3c69aab6bd136c37a8ed428d6a8be291b248eb5f461f9a6dae495077a1
SSDEEP 1536:fIuRK2Nrbk7LSn+crBX3Ao1gE6XweFxZ1qXvVw89iKaOoyaD3Zk4p:zRKCbcLcdX3T12wQxZ8w89PaCaLZH
TLSH
T11A5302FDBEE264501A56D9883E10F28DB2A5E42DD2B781934CF6D861CF4B456E0B02F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000042

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
Size 51KB
SHA256 80402fc1f48b5d23189933894267e4afbd72f4985df519f08b241eb3e70e24b1
MD5 0e8c5a122fb274ef1d518e52e314ecbc
SHA1 834eab777821dd52028173f3388c8178afbf54d3
SHA512 7c1143991fe3b34b2fbb558643e19974bb86b537af28d3369c250b901ae451bf1a3b3a4583560ba1ffe9f02948b11e01e6f2c2ed72d00a60b6aa6a9971a665c4
SSDEEP 1536:Kg1O7QsHFYjgu0Vch3R+acJTkNQ6sWNc/0xw42J1q:Kg87NH2EVVsZJQ6sUir42J1q
TLSH
T16A33F1FA6D305A2857EEF5C19B9F0C7605C070B116AFC9A27314033A5BEA764CF124EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000043

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
Size 57KB
SHA256 1d8df71aa0844ed197b9083c529d8f6525bed4fe4c589ede200c24a63282f440
MD5 eb09278856b2568f1188e2a8a5a0d1d2
SHA1 4d52e1c666f67bacd3a9db407424cbecb0c0be85
SHA512 db64105d4af6b39f6aec55224cbc42638196add00a095869d9213679c080ee1cb8ecda1f7e9f86eee4656c75d4306d35bdb8d68ba68bc0354c19118ea6a3935d
SSDEEP 768:5HJhD/+FrHsoZTSUHY4Si+8Kdy+i2stIdDwWWh5uEqRjQDHblySRkIIAo0T3VKFd:hyFrHso0zoSyYIIdDcvkCbI43VwlAA
TLSH
T19543F231DE93EF6A5DFA615C554B42988CBE9C1E7F09776882C6E58F0716B022EDD00C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 da72a5b8e52fd6eb06918080864799f8a143350bb501676cbdf8d81b0f894d06
MD5 d1251b921fc3de1c7025eee744149344
SHA1 333bcb54a30ff64400442ddf13b73746feb856ea
SHA512 b9d7aff34a8a7dd5d8e02916ea174d61e892dff34227905277df1bc19e09875033c78b915e0ae02baafa10b9119d2fc758d9dc07296ce0bd3a4a96cd68bfa16c
SSDEEP 96:LnUiaF5KDZjd8f6SRwdQhwQz/twx4DWgWrMHpAe:L22jd8PT/tlCQWe
TLSH
T16F91A317ACD2F4C0CF540C32EEA86CC35810E56A41CB17BB159B9AAC6E4FAE48CF91C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 b7bf94f5c1aacda9a2a5733e9da379659b8358d8fd921ec201415bb7d6c945a9
MD5 6b26e1c59ede84ffaa59cf84b698ae1c
SHA1 9fc2b0f242aca9aff188af52f7d877233a47093d
SHA512 df1cc4bdb2e03e3445ce769c4740c4e152b7c658ea3c2479dcd46ab47e095751628394fae7526ccde1a254fca0a00f443fa14cbb7c205f8a2c3fee7c287f208a
SSDEEP 192:3+L/DbjEveOxosg+866p8rqo1/COilDcstpSz:3+L/D02OxoTCNp3ixcstpSz
TLSH
T1B1026526D8D3F5D0DF0038369FA61CD32434C25903BA2FA7A55B46FEA91FAE48CE5185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 156c652a217a25404f9406529fa3e2d557763faf201d2d6202cb64018a5997b5
MD5 8c6757d2ce679b1b06f8f58b06f6275a
SHA1 2ecd74e3850c9e490d001a35e57ae764a952f103
SHA512 0458b561ae9d70b33c22b4074e1db9c45ad761df487d46c24a7009167300115b797c5c1259c1e71c9f0e7d21f44d326f9073c59d02ade7cd37095f5449c7f3f4
SSDEEP 192:DZGjGkb01JSJ0Wrq3e7I8IPU3hGU4/kg1mInIqIbaPGvJW9fPh0CDrQ1bNPiImtB:DZGjGkb01JSJ0Wrq3eE8IPU3hGU4/kg3
TLSH
T14042AAB7C3E8C62DC9115AF49B156F2FCE190A24032C3C26C9D8BE5B93E2971E21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 330d0d5590d68ba5625ab520d758345666399ed3e92b079675ae4c63cbcf1254
MD5 e5b35199aaca99b46305d4c7609f6653
SHA1 21cbf285deef6e05503432a0505a08097d97386b
SHA512 4c9feb3a91d11758adef24e49e7c2b77178ed6a29f03e9b939e08271094bb4c453be93df2c2ad753fa9e1828e3f8501260c1864e6dbd7c23390658477100f9d7
SSDEEP 384:DZGjGkb01JSJ0Wrq3eEAg+IPU3hEkg1mInIqIbaOBW9fZ0CDrQ1bNKImtKGMung6:J0ATI1WthGOD
TLSH
T19842ABF7C3E8C62DC9115AF49B156E2FCE190A24032C3C26C9D9BE1B93E2971E21575E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 bffb3ca0ffdee6e64c5276b749614ef9a7472cf61b4db3930b00ddfb8e178717
MD5 96aa27ac425405cb36073710ff516fcc
SHA1 090a3a96cdd4d548c74638eaa7af375b2a9c88ef
SHA512 46da040cae3c22ccef898ab284ebe81e602f5df47c664cf6bf275e026a88ed7455854b1a83d718c72eef631fca5de6c6c90a0e710c50545f5c50c41e1b925464
SSDEEP 384:DZGjGkb01JSJ0Wrq3eEAg2P4PqOHxV95dB/G6AIPU3hCIo0CDrRhGMungX9Ev1mq:J01O0Yn7RD6q87b
TLSH
T1DCA29AF7C3E8C62DC9115AF89B157E1BCE190A24032C3C26C9D9BE1BD3E2471E21665E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 653a92542d929ed5729ad73ae7c912ea0baff9795119bdec82ebd9275153a3e5
MD5 06d3804c07d76f6e85dc8506b10999e3
SHA1 bd2fd10391b22dbba2f4fcd841cb5b664c21dcdc
SHA512 68d77f05167dd70b338d37d02c94079c7890c2a4384a5477fff82f1e9413766b298becc16418b43841e9285b8f7dd224043ee78f2395cff1c4940b209ab1788b
SSDEEP 384:D0ujtixVyJJJZNkd7elwEQnIq5b1jLvKB9MxICEIPU3hCIo0CDrRhGMung9fH8aa:5PtOHmsDDf26i
TLSH
T1958277F783E5C62DCA0196F89B15AE1FCE190624032C387689D4BE1BD3E2572E21675F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 6ba5ed9552dfbe102bcab57815449691a6a6b3d4f458ce995fa0d43a5b5f7c17
MD5 86a0783040121403a92882a4cd2d9543
SHA1 355fbcdd76e060affd72f303a073a22d7cc7017d
SHA512 71496e4c9f45fba0ef3f56c700b3fea76a41da64c31cf68c29efafca729f1b36983c1b044f515e3f9a51d422a359c020ddd5c02a0ded7027c02245a3463d586e
SSDEEP 384:D0ujtixVyJJJZNkd7ewEQnIq5b1jLvKB9MxIC9vIPU3hCIo0CDrRhGMung9fH8aS:5PiOHmsDDf26q
TLSH
T1238277F783E5C62DCA0196F89B15AE2FCE190624032C387689D4BE1BD3E2572E11675F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 3KB
SHA256 446d3b0293758a1e49fc15d7eac293c29e0b19d0c8c545375ef5b0ce08145bb7
MD5 c4820fe642463dbb02f92b49207b338d
SHA1 972d189eab8f331a55d4064bde3fdf4f3f971523
SHA512 82c3abd20e620501aa1e3fd2879ee4cd938424e7f87e02469a27174c2aaa20c4df5b5d1b5205fda361f1b4aa8227657488d6a06e2ba20808669a9267964e91c4
TLSH
T176815DA7CA7EB81B202C5DBF1D44780665BAE43202B16CF4DF67D56CB0866F31B1A426
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 a70becbc58e2e59d552d56f4997a191cc1c855f940c5879dda8b0a5e6cf1e1c3
MD5 1d63edd3840fe414ee2c09bcca01d0f4
SHA1 9a6f68bc10a80617f2ca1ac72653599581028743
SHA512 65d580e6b9327a80b036d3f55ed7b323bbfa7d95288ad37d737ef1459eb37bb449d23bd6a387c026b777913e7125c59de7e9d1cd4d9183fece09860e6c565ac0
SSDEEP 192:+RecBhqHHiiv72vAPRp2++g9THsb+WNnyR4ov2BN46AXaUNVyIsnAUge:+RemhqiuC6XTFwsf2mace
TLSH
T17B42A32EB924693B5DDBC21AF9617766D7F6103139D42E84EAFC892C14E75CC322701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 917663b1961bccabae991b9c636ecbfdfad0f18278453e6a9fb5ded22ffc16db
MD5 2ba6e0defdab1e35e34dfdbc465c6221
SHA1 08634ff38a66398337e0181d1b855827be3168d0
SHA512 6a36149ef05dabf9cc0f278c6164e925dea58fc6d6f41ab46a65a9e7d2a16c3d7c027c199d243fedbbb6344ee6b2fed05c3f4c3135abeb509d13d0c2896238f6
SSDEEP 192:FORecBzqHHqYv7nvXPRpH+IQI9THsb+WN0t+NB5OjInosN46AXaUk8yIsnAUgE:FORemzqqE7nXlFw72koraoE
TLSH
T10C52B51EB924653B9DEBD619F9617726E7F1203129D42E84EAFCC92C14E79CC311701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 78a574aae1b8f4e8283322d74556530799fb2b51bd110207801ff2f74d23a680
MD5 ef358ee2f61f09bdd13166d7895b9797
SHA1 e87ec6a131dffeb0f88d42de54409a6f139a08d1
SHA512 aad39aedb66aaf5e954b03b40ef1b0aca78b7c53bbc9e87d343705a627889de214e63112c36919d5b0a955c0d3916aa6217be9494226bec24223af4b1fc4be6b
SSDEEP 192:3RecBzqHHqvv7nvXPRpH+IQI9THsb+WN0tqx45OjDI8SN46AXaUk8yIsnAUgE:3Remzqqn7nXlFw/rQ89aoE
TLSH
T1B252B55EB924693B9CEBD619F9217726E7F1203129D42E84EAFCC92C14E79CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ae2e5168b2c3633a2129c8ecff79678777713a3971265db4c787f3dc8bb356ba
MD5 c708054ab894402086e984a94ad9778e
SHA1 1a3b26e9211d2ce8a28621a5968c5b013717c7e5
SHA512 953fde837e97001477af81e5086cc417d9ce7dc983ddaf0d9165dedbd9030989667d3f930d6949b72a3ea430e28615453f18588bb7aced17c9b22480ca5874c5
SSDEEP 192:3RecBzqHHP5v7nvXPRpH+IQI9THsb+WN0t3/X5OjDI8XN46AXaUk8yIsnAUgE:3RemzqPZ7nXlFwg8Q8waoE
TLSH
T1AE52B55FB924653B9CEBD619F961B726E7F1203129D42E84E6FC892C10D79CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 cf92a644f03eb9b9646b90dc63645388a3bd051ee3d395e499ffc1e82ffc8746
MD5 3dbae1fb2f94e4a6ef22089157eb4b74
SHA1 d13c66bdfb12d75923c01b1b6a69f4e902f6e338
SHA512 d39a3c3fe6a9dfe7dbcbbda4c5ccda970f424e59b77f43f4c3a36cd0d4cb3642cd98ddd8fef0da845eedf0c6cd596e9d8409aa31a87d97050666841ad33dde54
SSDEEP 192:FORecBzqHHqRv7nvXPRpH+IQI9THsb+WN0t+NB5OjFS2tN46AXaUkVyIsnAUgE:FORemzqqB7nXlFw72o2CaNE
TLSH
T1AB52B55EB924693B5DEBD619F9217726E6F1103129D42E84EBFCC92C14E75CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9ad81dfba66051ae7604bbd1f44dbdd74484ada4317b27853d93ac5cc242dbe6
MD5 a0ed09780cf7041aa6966417387a95e8
SHA1 7b335e2e32d62cc1c863d8e051901b19baf97422
SHA512 99716368e43cb58e36d747b039f2ac737a31b5da35e13411876ddb26d404a4b296bbf37a8cb0401050b2c6efcea706b2f8ff2545fe143f1752a5eecc54b405bd
SSDEEP 192:3RecBzqHH90v7nvXPRpH+IQI9THsb+WN0tt525OjDI89N46AXaUk8yIsnAUgE:3Remzq9w7nXlFwAJQ8yaoE
TLSH
T10A52B55FB924693B9CEBD61AF961B726E7F1203125D42E84E6FC892C10E79CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 55d23a63a1997221d99f8c964e2dabd1f9c3c4d4a89b2be40dbb5916572683b7
MD5 772e8c4437fd00fe7ddb2df79d27ed02
SHA1 cece1d525ef6b89786d0f3899fb3f25f2e83bb6b
SHA512 e76136fdf5c8544624b5b5491950d3c54d3a71e41b5aca925ae0ad15bb1af62aa23b3f703c971bab60da3b42abfe5c94af50380705c51e95ba05189e54288731
SSDEEP 192:FORecBzqHHqiv7nvAPRp2+IQI9THsb+WN0t+NB5OWLN46AXaUGVyIsnAUgE:FORemzqqu76XoFw72WkapE
TLSH
T19342942EB924653B6DEBD61AF9217766E7F1103129D42E84EAFCC92C14E79CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e576dd066d2cc5181d8d13d6b915fc7a0d0d998212e94f26ebb0dc56f04a091b
MD5 b84b17253d5011dc828fce941fbbd280
SHA1 0aa0e4bc9c6ef8a7c5da4f4c83a9689dd38c9c95
SHA512 ecef3d78d52b2913f48ef70a1b53b970c19481bdb2599e56c10db81728913fd54046454e4de9188e717471c2d27330e5f0acd91d376f38446a1b478cc3553099
SSDEEP 192:hRecBzqHH90v7nvXPRpH+aOqI9THsb+WN0KqyYmW5DI8eN46AXaUk8yIsnAUgE:hRemzq9w7nXKFwnAm8ZaoE
TLSH
T1AE52B56FB920693B9DDBD619F961B727E6F1203125D42E84E6FC892C14D7ACC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 1f53ac77a682e6f2bfc9ae3449f12c260b9b7136bb4d6ecc5a790921fa667da6
MD5 aa81aea618b89b8c231a4b92342dabb6
SHA1 292f30175ff636e090f28058e46d9784ae446207
SHA512 2722f6acaebece90f91cdba2420a166cf415376c6cb089346e94cb654f20de3d9676051640acef95be18c1bfd9c1f06393e49e3c0631cdd3babfcd2ac9440ddd
SSDEEP 192:hRecBzqHHSCv7nvXPRpH++OmHn9THsb+WNuP3qyY5V5DI8hN46AXaUk8yIsnAUgE:hRemzqSO7nXNFwYgm8GaoE
TLSH
T10A52C65BB920297B9DDBD629F961B72BE7F1203125D42E84EAFC892C14D76CC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 6b74007130c2b6fa95f7c5ce37b1107e680173ccfa68194adc6fa11dcece9c8e
MD5 b9dcf0902da9006ce4754d6b85bb7c09
SHA1 dc6570b44c1f29d94284aa995494f1106a729893
SHA512 cec5cddd33eee0bd6f763254982b037643e6508b0545966474071c6edf82af427452e965c7517c84d9bec8a53e0bb10c1eb9df96022f961d54cec59a0c8e11c5
SSDEEP 192:gRecBzqYHoFv7nvXPRpH++OmHn9THsb+WNuPQAo1UCrmC+5V5DI8QN46AXaUk8yN:gRemzq117nXNFw1f3am8faoE
TLSH
T12362C65BB820697B9CEBD629F961B72AE7F1213125D42E84EBFC892C10D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bc8892075f8dc2e45bba50924ca86e6deba0e9c801b20a3541173a0596b71ca7
MD5 599f041577144c4c90277d7387c03146
SHA1 e6d0fa31da9acaa5d8f9bbe7f6f3d64de833b05b
SHA512 983d43139f2e888ad2175e9315a7a627637f8bed9483bed8375195102c627bca21e5787cbac407c0f02c8b1522176f59eda1a0a677931d1a86c4592c6f8e7b94
SSDEEP 192:FORecBhqHHiiv7nvAPRp2+gR9THsb+WNn+NBov2DN46AXaUNVyIsnAUge:FORemhqiu76XMFwUy2Mace
TLSH
T1D842932EB924693B5DDBC22AF9617767D6F6103139D42E84EAFC892C14E75CC312701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 682470b80a8412c5ce30076e52e6aac925288cf0088f94fe67968942fe8350fb
MD5 a3117801cac3233df45d5dc17b5a4b6e
SHA1 92cd7e0e48c83d2a183334d48ab33f4a2d1e0bf9
SHA512 13df768b21a9a83a02425f3d436505d126cf015b869e23f9b34defc0aa9e085160cca0ee55441e8e5a67606ee86880a9657cdd14d311fd40e6542dce1c009f0d
SSDEEP 192:gRecBzqYHovv7nvXPRpH++OmHn9THqDHsb+WNuPQAo1UCrmC+5V5DI8QN46AXaUM:gRemzq1n7nXNwrw1f3am8faoE
TLSH
T16C62C55BB420697B9DEBD62AF961B72AE7F1203125D42E84EAFC892C10D76CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 ac3808a2fde6e8aa87d77df78cf7d27336aaede719c9c24958feaada05e80603
MD5 8f88efe837bbfbd92daffd6b8b2cdb33
SHA1 05e3c77671fedb7438784d8e857c3db5dbf3bd4c
SHA512 55d5cc7303ce37f989fbc2af5de7fb98cb937641b8b69975e4741c6cde4efe889b85af5ee36bee62862c46e611646234e7ed1070094afe53d64b37712084f96b
SSDEEP 192:hRecBzqHHAiv7nvXPRpH++OmI9THsb+WNuTKqyY5V5DI8hN46AXaUk8yIsnAUgE:hRemzqAu7nXGFwJgm8GaoE
TLSH
T14D52C65FB920293B9DDBD619F961B72BE6F1203125D42E84EAFC892C14D7ACC321701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 159438bc6eed34a7072f3df2aec3ae1adbcf9ce73217002b38ffaef79ce8aa5f
MD5 103b84fb87b07b3fc5e5eda65142e6c5
SHA1 af9de18d59a1358635b0884e5f1c057ae2f8dfed
SHA512 e0ba366760b37a19363e31a4c21485171b6e15994508a0e45d6cb3a100f4e1363fd6555ca68aa92ae7cb98833d08a3f6d1d80ecd3eabd22c3c36047fc8df4f50
SSDEEP 192:hRecBzqYHo/v7nvXPRpH++OmHn9THsb+WNuPQAo1qy2mC+5V5DI8kN46AXaUk8yN:hRemzq1X7nXNFw1d2am8zaoE
TLSH
T10C62C65BB820697B9DEBD629F961B72AE6F1203125D42E84EAFCC92C10D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 ffcc0ceae8d19d77932b623720e8e9c03cbc7d2c8fc04fca1f195fe6b4100f6e
MD5 1c7aab076a5abd1c63ba7e8697ac528d
SHA1 11c7809e8c122c4051f1ed2ed78d41e600243d5c
SHA512 b01e40cb3b332401b1f725b9715a010990f1e40a746d558c47ff032c155f63c339546e9d3fc189541a439342333e82b49ecdf2a62058e162ed28996040cf54ee
SSDEEP 192:hRecBzqHHorv7nvXPRpH++OmHn9THsb+WNuPQAo1qy2mC+5V5DI8kN46AXaUk8yN:hRemzqoT7nXNFw1d2am8zaoE
TLSH
T15962C65BB820697B9DEBD629F961B72AE6F1203125D42E84EBFCC92C10D76CC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 ec7660f526955c9b90c31e3343d18ba63314effd6a3fab0f6e0eb80447768932
MD5 1afe6d356853ac222b8d18355463afc3
SHA1 e187e1f01141db6d2566a6f61dbd3681921e584a
SHA512 a5771d14653774ee643a5f212c7667f4d36351d4f068da747bc4ed2c70a8f071f329e98506f9973f7575f577e6288e20c0ef21f9b7ec4c368cfd610d8d2c4846
SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9xIB3Wh/+Z:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqc1
TLSH
T1E232C727988D9A3F4FECD558DC527F4F6DB102A672780C2896FB9C0403A97CE115A1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e51e2230ef2b62af_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\e51e2230ef2b62af_0
Size 1023KB
SHA256 d9219a2690dfe40cd0ad216dddb8dc9a20c2185feba6d8eeef63cae454f83075
MD5 983aaa9c3a42bb1172147d5fa79eb8b3
SHA1 e4fcb347b6d183efd374a7bf3ffddf3a7571a147
SHA512 ef7307b69010ff1885fd5f205acf36cb7b9c73a4801acad64dd7d903f45561b8fee6919eebca572d75287a2bbb58518fcef47f18f6c8842291c173434d343fc1
SSDEEP 24576:FZf5bDY1+2dPObPSa4wlDRcCxekVGMKIz:FZFDY1+/PSa4wlDRcCxekVGMKIz
TLSH
T1BE253CD873A2B463A375F1A4426F42C7F2AEE892B449886CB598DCD12E74C5540F7F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 72579da21ac43ce6733fd1bca12a4c4fee29777e6d90c538dd42fa23176b07ce
MD5 820d1bee70782b77d251d44b34ed50a9
SHA1 c2663a0e6438180af14d3932fa626f253f8bf97c
SHA512 3829d6b35e2c1f8c6cef1f5a51d57e8f80340584bbfb6c9d8899f9e199061c66df96ba3d519b599b5ba3b7d9c16db6e9d8b7755b7a1b4f2b31bbd262792c73dd
TLSH
T1CCA002202161506DC108427110818146A2184D140DD2231E46D9004CE9555978275850
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 2KB
SHA256 46aca3a4264a7fd9be6fe58a48ef58c16709da7bccc99d28de0c4b51f1109278
MD5 3a021ac7931d23ceb829823e48600157
SHA1 a97fabcc54d2fe0d734445df87611ba177a67a15
SHA512 4116173e8e381e89d2f30b9ebe6d299754d4857df5dd84464b967670c0e1f8b8ffa2f2545ab028f1319faa2744f95dd02652a34d3f0dab26d08073ed60562da2
TLSH
T14151C80D8905E927DFEC573665F504F1B73C90512BD69B2B29A924363783230A70082E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 4a65f53ed91cbe8fe465eefe455856fb23338cf59199a166e24c1c540463f5b1
MD5 259c53259121d22df8019f746880ea04
SHA1 655dc5b1f01579cc7fead4f152f4fbce569e6270
SHA512 6c998575377e1fe6080f67b8d6bebda2075dcc5d271eb25e2affbe9db2acc84be2cbbb057dfca565539d63cdecd8be9a42cf10d0785b76c7cc0240d2b06e5bb5
TLSH
T1A4B0022855915852CA55C67154D1844571155C1415C7522B61ED80549411645D791949
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 841fc20e4defacdfab284cf3627c9148d671bd206aaf333edbefd874eeb8ffe8
MD5 d56e0c02b0b7633b08f80bcee0e8afad
SHA1 4a04dd3d413d5cc6388ae96e1fd9b86e77cdfc6f
SHA512 b0bb2a8cc5bcbaef7483ef258cfc3ff45a5bdfe9722a479952ab439e309d00ac11980b755cc0b4ce703acddf5e7d81b7f18499d474545fdf4b8f7214a6f6e955
TLSH
T147B0121248602496C964C2F350900052633C580A5112135D308D8058982AFC8A01430E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59937c.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe59937c.TMP
Size 72B
SHA256 04cff5f19ffb16b47857aebc79e6fedca44da9ad6429f40da244aeec0eed8292
MD5 63e12120f75d7e3d9d62da979628e7da
SHA1 fbd1ab37191644328e075cd6e1956783036592cb
SHA512 810910a022b8529492d4f866eacc4ab3e2c5072154735ca45548ab50120dc58d4cf5f6165782ecdeaeac1380d43dffbf8f7ea1659d5f58ca740c9e34262510c4
TLSH
T139A002615B705515CD3A467070A102953261C8677EA21A5B559244689EAA7C08505102
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 150B
SHA256 ee033f7741a8e684c6b1945e92f09f9802316ea246b6d4df02f5d33814a0f1af
MD5 4046636867534dbbfa76724af4c823dd
SHA1 469b728954642658d6e7270a174c6700a3831328
SHA512 504c0071d3c94a29fa4bbf547a699446d69ebedc6fad8e8ea782c60b0a29d325956e78db13046e541db7144c14ebd31406872426115537a8794fc0f5fba8fbba
TLSH
T193C09BFB6410C69F4B34DBEC1418B72DD55B915D9CD5CDF8B44C4186257C933450297D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59df98.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe59df98.TMP
Size 157B
SHA256 cf07d395d2063b18c296018d91db37fb969b19dee2975ab1c8eb255b33e12727
MD5 edb7344beb196e509132ecb9e4bd49fc
SHA1 e41a6120218ef00958477711ce8a1ce5f12b47df
SHA512 8f12c0687403416ec165d0078bc8cce8091ff3bab9f400f6de4ed597c7c84e028d9f7c53aa03050e0bf5a85e9db6813c5b394b6e70178f5a43ed3e3cc5547851
TLSH
T1C2C08CFB2410829B0B3096E81028B31DD01B9C1D8CC4CCE8A40C308231389238501938
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 5d8403b4b679d48966b20f7eacc7cc69ae81e2f783efc93b89ab41b1c4b2b98f
MD5 c2ba6de548a874145c42b06e52f4fa76
SHA1 b67f7ccdd5886f9d4e0cf8c047717e538d4d4074
SHA512 2368331cf6bc4c2aa1f6c67b83563ab78ee0d2d455c26f50ca762621f50d1c9f57166abd2b49028110fa8b1ab0add822c2955c4bd057b32e351d2c3ac5af7abe
SSDEEP 6144:1dwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:XwvNSKGatRfdxgHKE9oBGcAo0
TLSH
T19934233B6D31F53384DCEB5CA60E9F2F6FF14CAA94A0D9A04CC526042366BD94E84D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 c715651c91ee0010ca56b84d4d9ff9e3aebab8c30d8812feab192af72b91a217
MD5 bc976ecfeccadc2f515d3545cb7c5a20
SHA1 be46270413e730530eb74b58b86fc6f22fd901f4
SHA512 6b0fd1b89f54ccc833e64a771f32a0884732024d0b79729dd6953e2655d18d291eec443e26f452577b8bd7860829d1626c4a1b0c52dd6fbb6b098a36d95b8c46
SSDEEP 6144:Vbwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:5wvNSKGatRfdxgHKE9oBGcAo0
TLSH
T19734133A7C32F57354ACEB0CA60E4B2F5EF18DABD4A0D9A04CC52A04236A6D85E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 cb11a97398957e24065c21945329c7574bd7e858f9b8974c96a84d84bf6109de
MD5 f0154ffac8e860f293e1708aaa081de0
SHA1 8e8fab0c55ac65d174927a6221d332bef985e12f
SHA512 7fbed9e764d88872d2bb526b7cc243ff6598e6cef7ac354f4bf492d6d2032e826ddc23f7837ffc5c305a9cafbffb13fb6bbdf991294ed9bc1a28e7bf66fe3ad5
SSDEEP 6144:Ubwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:qwvNSKGatRfdxgHKE9oBGcAo0
TLSH
T13934133A7C32F57354ACEB0CB60E4F2F5EF18DABD4A0D9A04CC52A04236A6D85E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 604884ce8285016d0e90aa52001cfad6d342c5e839b732a8fac130835e4ce5d8
MD5 617aa7470a23eaf4388b909703658735
SHA1 92c0a7a015692f113c77edc0510dc17342f6e6fa
SHA512 a2fbde50d2b9b2b84a076abcab4a79fad57e88468fb7748387f4a3aa0adb5759c74eff408bdb14b105d7806a4a7573ca0674abaaa796790e2fe60bcffce98605
SSDEEP 6144:sdwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:ewvNSKGatRfdxgHKE9oBGcAo0
TLSH
T1E334233B6D31F53384DCEB5CA60E8F2F6FF14CAA94A0D9A04CC5260423A6BD94E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 235KB
SHA256 8ad00e27879df36e71eef0b697672ab3622b461f85de0c0c5d52da1310d8e809
MD5 7657df23ee34ff04d4b56dda727be25e
SHA1 38979cc7254ba5b03889efb23b08398e99a766cd
SHA512 ce1555712305d931b1aa83d3623f7268167307c00a9353a39d50ef875ee0ba6b21ee30c65de36869cfe966feadbd75d3ace2fedff0ff0e5b53f0e7dd1a6c3e20
SSDEEP 6144:4dwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:KwvNSKGatRfdxgHKE9oBGcAo0
TLSH
T12A34233B6D31F53384DCEB5CA60E8F2F6FF14CAA94A0D9A04CC5260423A6BD94E84D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 719df1144a222cd467e6249137a0cc0ca7093c1f07c7c4094e18ff33c9e960d3
MD5 92e0aa95245ed6762cab53a27a2920ae
SHA1 b2998371e24e7a4f289f65fa8bce042a9e2a4cd6
SHA512 627b9560c943dbcf066c3e8758655045c16514c3eaf5cb2fc8e496ccdbfe39c351966fa9a007bad492f13f6a3f45571b00c3e001e4392a3e91f4d8b60b108ac9
SSDEEP 6144:Ibwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:ewvNSKGatRfdxgHKE9oBGcAo0
TLSH
T1B634133A7C32F57354ACEB0CB60E4F2F5EF18DABD4A0D9A04CC52604236A6D85E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 80235e66d959d89a8691be57de73581286967a253399bfa27cf655660d945d4a
MD5 3d29cd6db2ce225ee35567dd4a5e75be
SHA1 3683221f4f34681257420f8b26be881db2788598
SHA512 6d011fe04f10282a2840bbafef2d120c51e6bc1fafbdcc29a6a72d54448b2633a47965a38ff19ac4fc395a471668ddf946fdfe646ccf551ac67882e42d9ace1d
SSDEEP 6144:lbwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:pwvNSKGatRfdxgHKE9oBGcAo0
TLSH
T12A34133A7C32F57354ACEB0CB60E4F2F6EF18DABD4A0D9A04CC52604236A6D85E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 260891553fb76904f9eb2821b373bb9f44f079eb1148a8c3808be011f155cbf8
MD5 ef449ec20be2fccaad87cf286e5ea25b
SHA1 a55817d28d46b49eac76e3af5a739e95b6e3a812
SHA512 c65396cc1ed598c5a702135f002b1d66523a64d04d28baef353ac25d1ed0f0f12254d215aa5c1bd78aa8823487cd30896bc2145dda7a7cee2ccc352867225eba
SSDEEP 6144:Mbwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:iwvNSKGatRfdxgHKE9oBGcAo0
TLSH
T19034133A7C32F57354ACEB0CB60E4F2F6EF18DABD4A0D9A04CC52604236A6D85E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 236KB
SHA256 90403a33e8ae9242403be3da14414ec91ae5ef9af5fc93e89b5d430bec9ac40c
MD5 475ef8efc10416df1c602f7b8024a196
SHA1 6846be8172665d0d106dbc84df94d507526e80fc
SHA512 dd4c9a6a09d4777c40168f5937ddc0f9c2fe4210178e8e63c9a92e188f04e2533b07c114fe17e9c33345e9e0fc8d4e44f25d21642f350300266f5231ec64386e
SSDEEP 6144:rbwv3ju0+gSZcRGatRfZ72SRSj5H2TNm7Rkm1tYpBeh2BAo0:/wvNSKGatRfdxgHKE9oBGcAo0
TLSH
T1FA34133A7C32F57354ACEB0CB60E4F2F6EF18DABD4A0D9A04CC52604236A6D85E85D75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 db9055557bfb61b332c285f9c9595eeb32c9b56fa14f698fad082b002d19f39b
MD5 d2cc16a9e49b5f7f731a0e019e1784b7
SHA1 f9062dc9919b45db64cd27b1fc6c1e0cf95c7e08
SHA512 2d16005bdb11e22b688b5a4827aa82adf90f094e431edff46b9283c701f96cca1024a0eda75fbd65e163c79308acf06eb0d4312a8cb51d6c9ad771d00af46e79
SSDEEP 3072:sGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:fm7Rkm1tYpBeh2BAom
TLSH
T1F5C3123B5E70E9775979B74EB08E0B1F1EF14AA2C930DA42C8D85A0437F97CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4476_733999059\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

f7958d23-4799-4565-83ec-01e47c6ab19a.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4476_733999059\f7958d23-4799-4565-83ec-01e47c6ab19a.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
TLSH
T1F63402BD7D8AE686D006A17676C0B48BE1199F4E41CB7C0F668A89010D70F8C57B9DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download