hxxp://gcashpay[.]com

Analysis

user interaction
yes
max time kernel
96s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://gcashpay.com
Sample260806-3fbdracl71

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1768	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305324403355911"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe
Token: SeShutdownPrivilege	2232	chrome.exe
Token: SeCreatePagefilePrivilege	2232	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe
2232	chrome.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 2000	2232	chrome.exe	85
PID 2232 wrote to memory of 3548	2232	chrome.exe	86
PID 2232 wrote to memory of 1768	2232	chrome.exe	87
PID 2232 wrote to memory of 3548	2232	chrome.exe	86
PID 2232 wrote to memory of 644	2232	chrome.exe	88
PID 2232 wrote to memory of 644	2232	chrome.exe	88
PID 2232 wrote to memory of 4544	2232	chrome.exe	90
PID 2232 wrote to memory of 2576	2232	chrome.exe	91
PID 2232 wrote to memory of 4544	2232	chrome.exe	90
PID 2232 wrote to memory of 2576	2232	chrome.exe	91
PID 2232 wrote to memory of 1292	2232	chrome.exe	92
PID 2232 wrote to memory of 1292	2232	chrome.exe	92
PID 2232 wrote to memory of 2876	2232	chrome.exe	93
PID 2232 wrote to memory of 2876	2232	chrome.exe	93
PID 2232 wrote to memory of 5000	2232	chrome.exe	94
PID 2232 wrote to memory of 5000	2232	chrome.exe	94
PID 2232 wrote to memory of 3740	2232	chrome.exe	95
PID 2232 wrote to memory of 3740	2232	chrome.exe	95
PID 2232 wrote to memory of 4116	2232	chrome.exe	96
PID 2232 wrote to memory of 4116	2232	chrome.exe	96
PID 2232 wrote to memory of 2488	2232	chrome.exe	98
PID 2232 wrote to memory of 3780	2232	chrome.exe	101
PID 2232 wrote to memory of 3780	2232	chrome.exe	101
PID 2232 wrote to memory of 1784	2232	chrome.exe	103
PID 2232 wrote to memory of 5068	2232	chrome.exe	104
PID 2232 wrote to memory of 1408	2232	chrome.exe	105
PID 2232 wrote to memory of 1220	2232	chrome.exe	106
PID 2232 wrote to memory of 1220	2232	chrome.exe	106
PID 2232 wrote to memory of 4564	2232	chrome.exe	107
PID 2232 wrote to memory of 4564	2232	chrome.exe	107
PID 2232 wrote to memory of 1648	2232	chrome.exe	108
PID 2232 wrote to memory of 1648	2232	chrome.exe	108
PID 2232 wrote to memory of 616	2232	chrome.exe	109
PID 2232 wrote to memory of 616	2232	chrome.exe	109
PID 2232 wrote to memory of 836	2232	chrome.exe	110
PID 2232 wrote to memory of 836	2232	chrome.exe	110
PID 2232 wrote to memory of 4196	2232	chrome.exe	111
PID 2232 wrote to memory of 4196	2232	chrome.exe	111
PID 2232 wrote to memory of 3312	2232	chrome.exe	112
PID 2232 wrote to memory of 3312	2232	chrome.exe	112
PID 2232 wrote to memory of 1296	2232	chrome.exe	113
PID 2232 wrote to memory of 1296	2232	chrome.exe	113
PID 2232 wrote to memory of 4700	2232	chrome.exe	114
PID 2232 wrote to memory of 4700	2232	chrome.exe	114
PID 2232 wrote to memory of 3048	2232	chrome.exe	118
PID 2232 wrote to memory of 3048	2232	chrome.exe	118

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://gcashpay.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffa6019c728,0x7ffa6019c734,0x7ffa6019c740
  2⤵
  PID:2000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,13651051320360516232,5415973699651565389,262144 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1568,i,3054442995191185647,15494483357245185290,524288 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,16829850287870417876,3189045677062468859,524288 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2144 /prefetch:8
  2⤵
  PID:644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,3419322333932370460,10159071901135505437,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3152,i,3096526097702941152,15768948359065057433,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4440,i,294143085282474886,545769000256975435,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:1292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,7860231783285966879,10109081470308698404,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3940 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3452,i,16896607105760651871,9704289526721170837,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4836,i,11089495731770005786,12727734909567329055,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3184,i,1550778681390524109,9537550672557551931,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6116,i,6176062752038500687,15764324874408845068,524288 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5128,i,15321985497349032199,1962874745007497083,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4692,i,52221874728381752,13978223578851871775,524288 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3184,i,8346382973707637275,13108328289319768852,524288 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=208 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3392,i,10138296223707002344,15311814262903838403,524288 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4716,i,1949552221291349927,16804085475039221389,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3316,i,2701435653979755940,12862314717489350008,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6156 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4692,i,8728449140325729443,1031514980961286950,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5232,i,17390323579117765517,4856749473708545731,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5372,i,15486631100205085931,10990688636470853054,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5180,i,17726520535079779877,13885383294911531477,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=728,i,14865398401021772633,8375693027786160174,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1016 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5168,i,478964885056621279,17784840036561247254,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5852,i,11550633309943415164,96366924793982900,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6260,i,10458762269032822543,15790952456592916505,2097152 --field-trial-handle=2016,i,14170583105727961248,1256444088663643642,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:3048

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4596

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 390547299bd527e7e9ff6226d9f1927b8732cd2e8d2252a67c96a400b35baf85
MD5 dc4fc6676743d5bb45ec42318e42a829
SHA1 08eeaa54db50ae1fee3cd0e2605a7a05e1e65b12
SHA512 e08db0f9674814e88e6441770292ad5baf3e97fb1bc8c432362062db832223b287721be112e1971952df0872b078dc124a5091ddf5167a43759fc9479cf721bf
TLSH
T107E02BB9C920AD2B0CFD0718745D4687E75423572B54856F3E3DD30D8FB963A0986C1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 9f0ba229f0fc52cbec86795bd7ed3f8448e88d24468b0df095e1d6cbe10dd276
MD5 fc47c1da98f9ba5010d8fef73aedfae6
SHA1 0ec9897e4e33c7956dcd5fb5482c5af4766c63a8
SHA512 19aab943eeccc8991c8fd341cef4329d1c66ff271e01ee41fae34246d2b4a773078f22927d928657e8749ceb7011bc8e43b6894d4d9ba7b26e7e0ec31f855a97
TLSH
T155B0223CBAA0000AC3A003B028E008003AF00FA022A3EFB3C3F380C8E2A2FBE0000200
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 b9fff5146b12edd002aa98dc391d68f0822e9fea940925f9b78d469507b4ae30
MD5 b7bcc0eb2c7ee1518f7edd4cd7652f37
SHA1 ecbff67b284285a119d4fa970a322466f2d7d4f9
SHA512 f4019c84a8773037903dc64e98d514f83b805b1345aec9423a6d0f8fd9eb5e932b22f14d0a2980e4727bc38ee875d310d65d1241998b2d4e6f2e2d62f1a7f2c9
TLSH
T1FFB024045D510301C75C0330D4D0404433F10FD437534D3143F500D4D1107F41000000
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 cd6bd77872502738d60fa1ef04b60d2efe76b680244297a3d21b04b3395a5c14
MD5 f44991ae152e4d098767920431095c36
SHA1 f01b3b39bf5dde4f216891b120839b3808c5891e
SHA512 52119320541af1633a29eeaf27efd084bf6fedc13cfdc366e5dcee5b854f7e9a002f7989118be1f518903664c906d9b8af8c4c4551389d8ebcc11369f2052ac1
SSDEEP 3:MsEllllkEthXllkl2zEiwKlt:/M/xT02z
TLSH
T1734402047BC00805C90020704111835203A0D411061197433B611852AD865840C04014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0c33b3118199c1c383a2c2931cedf6b5a05ec05f559ef95871d8440b2afb42ac
MD5 ae62b1a4b1452cc84e38e744cc6250c4
SHA1 6d0be0fe773702c7a990c6938af53feca409e3a0
SHA512 d6d9821cad43d2315017fac3a3aab2d557b5cb5a741d383d8eac770cec13df1629e48dfe24ab6a30332031f559ef22469cdee87ba5e4cf8b91460b8e10945d2c
TLSH
T17F41AAF793F4C97E8A1092E4EA156E1FCE690524032C3CA288D4AE1B53F3872D10179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 523B
SHA256 19b4517d1690fb8b24e88f5b51d9ee085b6c21d603e98c55f0353f4b8cd01c0e
MD5 55128259514c3d9ca65505a2b570cdf1
SHA1 56896695247cbeb28fc65b45982bee24eb50ca9a
SHA512 64e96eccccfe76227a95779f0a7f1b59f89280d3263d200f344b48a06cc7ba1c7eeeb649404321de09a0071d573aa26be141a65b9ad35e33d7caf62d79f18fdc
TLSH
T1C5F09EAB97A97063207D44EB1E087C0969BAE8350281B8F8CFAF436CD1815E30F131B3
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e4d1471f403ef8cfe2b48abe76387143fde9e6788fc26699b86c7d7dc287a58e
MD5 2d41a6631ddfd03ca4a66bc8705641f5
SHA1 490c30eac4bae7831e9a89a3b99beb98cef8de03
SHA512 14b44cabdf94387c1e7dcff414d86d807154f3105ab940a235a852cac39e7166350046bd4536d447b7aa3fc35c67b5674d1b1a5040cb7957e3031ca6d3feda06
SSDEEP 192:wRLvShEXiQ1VieEv72ympAPRp2XM895HY4b+WNnFpsVjuT52nVIAVxsaGKf1VyIy:wRL627gQUXO7vTiY2GA7saHre
TLSH
T1AA52C77EB924257B5CDBD31AFD267363D7F1106524842E88EAFC9A2C14E76CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bedfbefcf1043b0111d4b4515697c233ba8c493fd1ed78199836c493c93679e0
MD5 1145e05cc40f6679c6b462582bcec951
SHA1 edf2f84d77939afc4e4b9428262d2cea7cd30273
SHA512 514655021e7b90dc3d8b45446b66122d7e453e7aa77ff5f859bdb7514a25bf4a911a8cd4b82b50611065f26ce0b60443568f21dbc37ceeaf6570372d1d50f1e1
SSDEEP 192:wRLvShEXiQ1Vizyv72ympBPRpZXKY95HZWoAkb+WN7aLFpsVjubpWnVIAVxsaGKd:wRL62IeQDX17jmPiQWGA7saHOE
TLSH
T1CC62C67EA424257B9CD7D21AF9267767E7F5106124C42E88EBFC8A2C14E76CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 842c6f07d343124dafa25b1bd4a2f10768dd468d14388d846d078127e06e9b5b
MD5 a4536ad0795253e92007ecf4929dbccd
SHA1 595ccc621e7e73b54935ae8e94797d6d13aee6c2
SHA512 84e95aa4eae36901932882f038b45c8e87d584f2e5d121ca9a809ec77601e80d6dc3368109086a60d3dbe8c32f6016c20fc71617c432b0f39c75694aa7dcc2c2
SSDEEP 192:wRLvShEXiQ1Viqbv72ympBPRpZXoY95HZKMb+WNnFpsVjubpWkVIAVxsaGKfaVyN:wRL62ZjQDX77bTiQWLA7saHiE
TLSH
T1C352E87EA528257B5CD7D31AF9267763D7F5106124C42E88EBFC8A2C05E76CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 634c2abaa6eb1535bc18f0c919e7f4f594996f619d9491e7c03c2fb95b21039b
MD5 201f8502dc88a89a644a01b85dcd525e
SHA1 ad07e4b494254010e6cd069711c44bf531aff9e7
SHA512 f2aed3f685bda8d78b24f8490a41356766e8c45dfd29bb0544b57bb2532e5276d52ad0d2aa84a15ef1ff156dd539c9fa6f6754605d03d8dfbb363c103a691393
SSDEEP 192:wRLvShEXiQ1Viejv72ympAPRp2XM895HY4b+WNnFpZT521VIAVxsaGKf1VyIsnAC:wRL627bQUXO7vTn2QA7saHre
TLSH
T1CB42C73EA924353B5CDBD22AF9267353D7F5106524C42E88EAFC9A2C14E76CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9c49fd7905962ef635476aef84d59a1def0f49d6074907acb3c36fa2589457b0
MD5 3bc0d1b8c260e4ef6234010cd426bd8c
SHA1 9b4059acd58aee7d599ca43d3cebd418c86bcaf5
SHA512 f1b8ab873facfdf94792e39f2e0bd9ce1e3f80dfe407026553a3ed827d67b0b2c4dfe50f4223a92be49145e1fb2455cd44e5e53228f24aae8aab368de485984a
SSDEEP 192:wRLvShEXiQ1Vizbv72ympBPRpZXKY95HZWoAkb+WNnFpsVjubpWkVIAVxsaGKfaO:wRL62IjQDX17jTiQWLA7saHiE
TLSH
T1D552D77EA524257B5CDBD31AFD267763E7F5106124842E88EBFC8A2C14E76CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 842e4c9d6cd95132897bc1809bae7a36f3b7af9c54541b977d078ba320ce397d
MD5 c109983d4a0ae0f6f5745d06e74c2353
SHA1 8893f0a35d18bca0b5cfc72e903d1b94bd12f817
SHA512 d49ae7d23522a39288f8c7ac8cd0414563e221eddf5195ebaff9048685774aaa93ba212234e9809ed05faee79d2f56d67c4a2f527dfb8a99cdd7544310cb4e62
SSDEEP 192:wRLvShEXiQ1Viqzv72ympAPRp2XV895HZawb+WNnFpsVjuT52DVIAVxsaGKfgVyN:wRL62ZLQUXR7/TiY26A7saHcE
TLSH
T13252D77EA524357B5CDBD21AF9227363E7F1106524C41E88EAFC8A2C15E76CC221742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 48509f38b9e669a6727255a3e4a4b05b240c19277d13194022605af5ed28b2d5
MD5 8159c7be617a8250bf81ecb54a87dfed
SHA1 dd9d9d158b4a2689ac5f64af7bfb6dfedcc99cb9
SHA512 c13ad7b7f3ac1e9cd20c48b103d4114e5207b2e7b220477befe4a313ac17330d3ac9f2f5fce7251c9158506d4701831740868e2b75860b7c08d38e4d193dca24
TLSH
T1DCB0121180015302C05203B4214AA488B21C5F14A60F170343E0AD37CC26162C014151
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588ce9.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588ce9.TMP
Size 96B
SHA256 e9b5e535a30ef0e31b01d2c1de517ae5e81b6364b759b0b210a2c79295912c16
MD5 6e197d520037a5d6bd59ae8af590d4f1
SHA1 067a70db9c7346ca585c7735863edd652a75b181
SHA512 b7e8a21e5bab60450f879f6fe64523a76bab7621b112ea89156682e4e2738826b9de60428415b1c34878ff74643efb2f083dfb43cad225e98bf9bcedc5335e6b
TLSH
T118B00279C1426322C15207F02999D5E87560DF75C707762393E91E7AEC266B28929160
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 4ad6932deac82725467733b488e59c20bda0c0cc04ea67ec92e2128e71169c1c
MD5 57f8c4dd4207ca69a15b9747865cb47b
SHA1 58cf3b9b79cf73136f50f625026f703b8c3582e4
SHA512 b514f6d5e9afc1f797a115df9f7295e4b364f39a7326c4fd23186fae42c444b68286ea9ae36456c00a66a3f5a7fbde84e5d05094a3ddfbf26864bd66d1979fa8
SSDEEP 1536:hNyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Zqfd7NtZL8cHQRZEQ6Spsk
TLSH
T14AC30237DF861E339DC2DB60B9130EDB93F644A99034D305EA6D7BAB6C83491A54289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d24e8e4c61c3e0abedbbdc8f00aab14ea9287ac3744d0ada9b905bc522648c1a
MD5 7c9d6378250ca9cbee732720e8cefce2
SHA1 d6c1fb674008b1d4c8b81695452704aedc9f9920
SHA512 358f95e9f8e6366d0d868f47bd11d2faba170c83ce0b1a388ab2c41da8f56476caf8f5301daadb248c08030549a2e1096df656ad21fcffb4409b90b6c8a4c177
SSDEEP 1536:hVxGyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:xMqfd7NtZL8cHQRZEQ6Spsk
TLSH
T19EC30237ABC61E339EC2CB70B9130ED797B544A99034D305AB7D37FB6883895658289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 156KB
SHA256 3015e231404a4db15ffb27a197d092443b0d0bee1e5dbe34fa10fe385b23f0b8
MD5 a6636e65b6a20ec3924431bd55e52ebc
SHA1 086d4f4d0d4c31884257e80562bf8d5d3399c969
SHA512 83f19798da7af6a1ff14a9239fc676809505374735ae815d5c5f1db0a6639e7b485c6935fc3d57b8ea38bd5f46a78c9c4d5324ad2d5ef3643e280f47e1219187
SSDEEP 3072:LX8ZyIHKZUx/SkWeRAtkpUqfd7NtZL8cHQRZEQ6Spsk:LMZM6x/STtqUqZ/ZLW3Exk
TLSH
T17BF31235DB822D33CE8ADA34A5630FD747BA51DEC434D200EA783ADB58928D5B58389C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 31adf3b063e1ec51e20ea070188dc838232da1289ee42a32896f75ad30a12f94
MD5 08a38143da4f73b8ba2a4224c97bb704
SHA1 1e3a031e92c0e11091698ef8cbedf11115b8ecfc
SHA512 0c79ccb27e70c9a7bdcef451de77fa15118c5a5c2d696c552be086fdb3268144c1aa4329d60ffabc748de97dd26eee307f494434b1a8dc35246f6f9d15485611
SSDEEP 1536:TNQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:0qfd7NtZL8cHQRZEQ6Spsk
TLSH
T1A1C30237DBC21F339D92CB64B9530FD697B644A99034D301AA6D77BF6C83891684289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 69630680050fc19ea38baac63b0027b64c3d1d1dd43f57917a8ba78605b6f068
MD5 6c4e1a5dab6da650e1848005eb450739
SHA1 12cf96b9c26e908fcb34b139fdae7cb381b46ef3
SHA512 1f76bfd7d393f0acc8441ab946749d88a61be903acdbf51546e2469f88278660c978a77038ffd25c4fe0f3b641a215fbe6c016a84eb955bbb9db761228d1c5d3
SSDEEP 1536:IVxGyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:UMqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1C3C30237ABC61E339EC2CB70B9130ED797B544A99034D305AB7D37FB6883895654289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download